Hallo ihr lieben. Search Protect auf dem Rechner Windows 8 und bekomme es nicht mehr weg.

Telcorion · 03.09.2014, 15:28

Hallo,
auch ich habe das Search Protect Problem. Habe vor ca 1,5 Wochen extra Windows aufgefrischt in der Hoffnung dass nicht nur die normalen Programme sondern auch eben dieses Search Protect weg ist. Ich kann es unter dem Punkt "Programm deinstallieren" nicht löschen bzw deinstallieren. Ich weiss nciht mehr was ich machen soll. Bin leider nicht ganz so fit auf dem Gebiet und kam irgendwie bei den anderen Beiträgen nicht so klar. Könnte mir hier wer Schritt für Schritt helfen?

Liebe Grüße

cosinus · 03.09.2014, 15:29

Hallo und

Hast du noch weitere Logs (mit Funden)? Malwarebytes und/oder andere Virenscanner, sind die mal fündig geworden?

Ich frage deswegen nach => http://www.trojaner-board.de/125889-...tml#post941520

Bitte keine neuen Virenscans machen sondern erst nur schon vorhandene Logs in CODE-Tags posten!
Relevant sind nur Logs der letzten 7 Tage bzw. seitdem das Problem besteht!

Zudem bitte auch ein Log mit Farbars Tool machen:

Scan mit Farbar's Recovery Scan Tool (FRST)

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Telcorion · 03.09.2014, 15:47

Hallo und danke für die Schnelle Antwort.

Ich habe seit der auffrischung von Windows keine Logfiles mehr da. Zumindest finde ich keine mehr.

Habe FRST64 zwischenzetlich runter geladen und werde das nu n mal ausführen.

Grüße

FRST Logfile:

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 01
Ran by Sacha (administrator) on EAMBAR on 03-09-2014 16:32:59
Running from C:\Users\Sacha\Desktop
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
() C:\Program Files\005\hzunyanhtn64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(TorchMedia Inc.) C:\Users\Sacha\AppData\Local\Torch\Update\TorchCrashHandler.exe
() C:\Program Files\005\vulsrsebjh64.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
() C:\Program Files (x86)\CinemaP-1.4\9907d779-26e0-4bcb-b3b5-d00ec154803b.exe
(CinemAPP) C:\Program Files (x86)\CinemaP-1.4\49d67866-bcb1-4ace-8197-ee18e665e23b.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Update\33.0.0.7326\TorchUpdate.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Hola Networks Ltd.) C:\Users\Sacha\AppData\Local\Torch\Plugins\Hola\hola_plugin_x64.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(McAfee, Inc.) C:\Program Files\mcafee\virusscan\mcods.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-10] ()
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-2359974274-1062960934-2306791803-1009\...\RunOnce: [RegAutoPlay] => C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-21] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM-x32 - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKCU - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = 
BHO: CinemaP-1.4 -> {11111111-1111-1111-1111-110611171162} -> C:\Program Files (x86)\CinemaP-1.4\CinemaP-1.4-bho64.dll (CinemAPP)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: CinemaP-1.4 -> {11111111-1111-1111-1111-110611171162} -> C:\Program Files (x86)\CinemaP-1.4\CinemaP-1.4-bho.dll (CinemAPP)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin-x32: TorchVLC -> C:\Users\Sacha\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2012-09-03]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2012-09-03]

Chrome: 
=======
CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
CHR StartupUrls: Default -> "hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T"
CHR NewTab: Default -> "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: Default -> webssearches
CHR DefaultSearchProvider: Default -> webssearches
CHR DefaultSearchURL: Default -> hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-23]
CHR Extension: (Google Drive) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-23]
CHR Extension: (YouTube) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-23]
CHR Extension: (Google-Suche) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-23]
CHR Extension: (SiteAdvisor) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-08-23]
CHR Extension: (CinemaP-1.4) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb [2014-08-23]
CHR Extension: (Google Wallet) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-23]
CHR Extension: (Quick start) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-23]
CHR Extension: (Google Mail) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-20] (Broadcom Corp.) [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-23] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-23] (globalUpdate) [File not signed]
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 hzunyanhtn64; C:\Program Files\005\hzunyanhtn64.exe [709120 2014-08-23] () [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [694784 2014-08-23] (Cherished Technololgy LIMITED) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-23] (NTI Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-26] (Dritek System INC.)
R2 TorchCrashHandler; C:\Users\Sacha\AppData\Local\Torch\Update\TorchCrashHandler.exe [1216520 2014-07-10] (TorchMedia Inc.)
R2 vulsrsebjh64; C:\Program Files\005\vulsrsebjh64.exe [709120 2014-08-23] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-08-01] (Atheros)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [117632 2013-06-01] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-26] (Dritek System Inc.)
R1 {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64; C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys [61008 2014-08-21] (StdLib)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

Und hier der Addition.txt

Code:

ATTFilter

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 03-09-2014 01
Ran by Sacha at 2014-09-03 16:42:21
Running from C:\Users\Sacha\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {ADA629C7-7F48-5689-624A-3B76997E0892}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee Anti-Virus und Anti-Spyware (Enabled - Up to date) {16C7C823-5972-5907-58FA-0004E2F9422F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: McAfee Firewall (Disabled) {959DA8E2-3527-57D1-4915-924367AD4FE9}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 clear.fi SDK - Video 2 (x32 Version: 2.1.1925 - CyberLink Corp.) Hidden
 clear.fi SDK- Movie 2 (x32 Version: 2.1.2008 - CyberLink Corp.) Hidden
µTorrent (HKCU\...\uTorrent) (Version: 3.4.2.32239 - BitTorrent Inc.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{9DDDF20E-9FD1-4434-A43E-E7889DBC9420}) (Version: 4.0.0.0059 - NTI Corporation)
Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3007 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{8215A318-CC27-435E-B3EA-2E3443C8998C}) (Version: 1.00.3013 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3006 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3011 - Acer Incorporated)
AcerCloud (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.01.3115 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.00.3201 - Acer Incorporated)
Adobe Flash Player 14 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 14.0.0.179 - Adobe Systems Incorporated)
Backup Manager v4 (x32 Version: 4.0.0.0059 - NTI Corporation) Hidden
Broadcom Card Reader Driver Installer (HKLM\...\{F0A7DF2F-0BE0-470F-B137-D7A19F977189}) (Version: 15.4.7.1 - Broadcom Corporation)
CinemaP-1.4 (HKLM-x32\...\CinemaP-1.4) (Version: 1.34.8.12 - CinemAPP)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.01.3108 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.01.3108 - Acer Incorporated)
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3103_44819 - CyberLink Corp.)
CyberLink MediaEspresso 6.5 (x32 Version: 6.5.3103_44819 - CyberLink Corp.) Hidden
Definition Update for Microsoft Office 2013 (KB2760587) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E17BF11-A72D-4DA8-BFAA-DD262C17C2DE}) (Version:  - Microsoft)
Dolby Home Theater v4 (HKLM-x32\...\{B26438B4-BF51-49C3-9567-7F14A5E40CB9}) (Version: 7.2.8000.13 - Dolby Laboratories Inc)
DVDStyler v2.7.2 (HKLM-x32\...\DVDStyler_is1) (Version:  - )
Free YouTube Download version 3.2.13.925 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.13.925 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.20.1230 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.20.1230 - DVDVideoSoft Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
HDVidCodec (HKLM-x32\...\1ClickDownload) (Version: 2.1 Build 26473 - hdvidcodec.com) <==== ATTENTION
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2828 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.5.0.1207 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel® Trusted Connect Service Client (Version: 1.24.388.1 - Intel Corporation) Hidden
Java 7 Update 67 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217067FF}) (Version: 7.0.670 - Oracle)
Java Auto Updater (x32 Version: 2.1.67.1 - Oracle, Inc.) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.5 - Acer Inc.)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3004 - Acer Incorporated)
McAfee Internet Security Suite (HKLM-x32\...\MSC) (Version: 12.8.988 - McAfee, Inc.)
Microsoft Access MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft DCF MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Excel MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Groove MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Lync MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2005 Tools for Office Runtime (x32 Version: 8.0.60940.0 - Microsoft Corporation) Hidden
Microsoft Word MUI (German) 2013 (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
MyWinLocker (Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker 4 (x32 Version: 4.0.14.35 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{17DF9714-60C9-43C9-A9C2-32BCAED44CBE}) (Version: 4.0.14.24 - Egis Technology Inc.)
MyWinLocker Suite (x32 Version: 4.0.14.24 - Egis Technology Inc.) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.9008 - NTI Corporation)
NTI Media Maker 9 (x32 Version: 9.0.2.9008 - NTI Corporation) Hidden
NVIDIA Grafiktreiber 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA Install Application (Version: 2.1002.133.889 - NVIDIA Corporation) Hidden
NVIDIA Optimus 1.14.17 (Version: 1.14.17 - NVIDIA Corporation) Hidden
NVIDIA PhysX (x32 Version: 9.12.0613 - NVIDIA Corporation) Hidden
NVIDIA PhysX-Systemsoftware 9.12.0613 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.12.0613 - NVIDIA Corporation)
NVIDIA Systemsteuerung 327.02 (Version: 327.02 - NVIDIA Corporation) Hidden
NVIDIA Update 1.14.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.14.17 - NVIDIA Corporation)
NVIDIA Update Components (Version: 1.14.17 - NVIDIA Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.01.3200 - Acer)
Opera 12.17 (HKLM-x32\...\Opera 12.17.1863) (Version: 12.17.1863 - Opera Software ASA)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{F509C1F4-0029-49F9-B145-A4C4E8DF481A}) (Version: 4.0.3 - dotPDN LLC)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{C960FF38-431D-429D-AD1F-FBD12A45B7C5}) (Version: 2.0.17.17583 - pdfforge GmbH)
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.0.206 - Ihr Firmenname)
Qualcomm Atheros WiFi Driver Installation (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 11.05 - Qualcomm Atheros)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6657 - Realtek Semiconductor Corp.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version:  - Microsoft) Hidden
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
Shredder (Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Shredder (x32 Version: 2.0.8.9 - Egis Technology Inc.) Hidden
Spotify (HKLM-x32\...\Spotify) (Version: 0.8.4.99.ga249b5f1 - Spotify AB)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
Torch (HKCU\...\Torch) (Version: 33.0.0.7326 - Torch Media, Inc) <==== ATTENTION
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Excel 2013 (KB2883061) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUS_{B74255AD-6736-4648-A35E-CCB2D38D3818}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881070) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{2B0BC4FE-4936-4EC6-8521-526CF31B3DC4}) (Version:  - Microsoft)
Update for Microsoft Lync 2013 (KB2881083) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{F1FFD0B3-9F20-4EE7-ACED-5B63DFA018D8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760249) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7A4AB8E1-C091-4BD3-B308-844BA6EE752A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760344) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EF77B4A6-DFEC-4010-A87D-9B6BF87FABEC}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2760544) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{62857CDD-2985-4939-91BA-19ED0B0031A5}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2768012) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{0814662C-FD28-4DE0-ACE5-EE50D1D6C8FB}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2817302) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUS_{E79EFFDB-192A-4D9E-A2DB-C0F774E6EC32}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2826040) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C4AEA56A-0759-4D08-9FAB-31A92137D0B8}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2837644) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D692E9FF-84BF-4F44-A0EA-D58ECE0D538E}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2863843) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{290D80DE-03AB-47EC-9402-108AF4CE4F66}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880457) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{EC2AF602-2730-4B05-9438-06CDE43153F2}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880462) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{24584DD4-C680-4FEB-A464-D760C7A5B041}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2880478) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8116ED50-F1E7-49E1-9D8D-421497D34B0F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881009) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{3033838D-15E0-4199-8CBD-A7F2057AE653}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0016-0407-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2881035) 64-Bit Edition (HKLM\...\{90150000-0090-0407-1000-0000000FF1CE}_Office15.PROPLUS_{885C981B-F1E3-430A-A099-31CA9D28C251}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E919ACF4-A1D7-4CAA-A103-5EB115563721}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883049) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{39D9DAC1-16A7-430A-B2F3-4D3D000454D0}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883052) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{FA74B1B8-D3F4-4B4A-88DE-41CB8CEDAC3F}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}_Office15.PROPLUS_{E12997A4-DAEC-4563-B330-F21EB71880D9}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}_Office15.PROPLUS_{F9C35D99-CA8E-4D17-B785-66AC654D5664}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}_Office15.PROPLUS_{18C53DCB-FA98-4A7B-BC2E-6DA30D4E4901}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883060) 64-Bit Edition (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}_Office15.PROPLUS_{540B47E7-0F89-4CA1-8BFA-5CF377A963AF}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft Office 2013 (KB2883062) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{4A0B4ED7-3652-42C9-9D7E-42686986F69A}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00BA-0407-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneDrive for Business (KB2883066) 64-Bit Edition (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}_Office15.PROPLUS_{5E9FA8D8-45A9-4223-A5A8-285CB6188592}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00A1-0407-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft OneNote 2013 (KB2881082) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BFD66A5D-F608-441E-9282-41E13F5E7412}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft Outlook 2013 (KB2880470) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUS_{34A169EC-990A-4DAE-AC65-9F981158B7DB}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2883051) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{E2C51083-2E10-4E61-8F36-E6308DD0FA94}) (Version:  - Microsoft)
Update for Microsoft PowerPoint 2013 (KB2883051) 64-Bit Edition (HKLM\...\{90150000-0018-0407-1000-0000000FF1CE}_Office15.PROPLUS_{E2C51083-2E10-4E61-8F36-E6308DD0FA94}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Publisher 2013 (KB2880999) 64-Bit Edition (HKLM\...\{90150000-0019-0407-1000-0000000FF1CE}_Office15.PROPLUS_{C07147B9-CC0B-4CC1-A107-A705889A54F2}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Visio Viewer 2013 (KB2817301) 64-Bit Edition (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}_Office15.PROPLUS_{8E5CD68A-CDF8-4930-88DF-B7778B1871A9}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2878319) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{BC51FE30-3A56-4802-8D9E-E9BC05B56B49}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001A-0407-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-001B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Update for Microsoft Word 2013 (KB2883058) 64-Bit Edition (HKLM\...\{90150000-012B-0407-1000-0000000FF1CE}_Office15.PROPLUS_{650D4F00-56F1-4E8F-ABFD-7C842253C96A}) (Version:  - Microsoft)
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points  =========================

27-08-2014 20:20:12 Windows Update
30-08-2014 18:10:14 paint.net v4.0.3
03-09-2014 06:20:30 Windows Update

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {07D798FF-0444-439C-A89B-AA72DF3EB6AA} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-2 => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-2.exe [2014-08-22] (CinemAPP)
Task: {0BA6E635-119B-4B62-B573-0391243ABB2C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {0C151062-ED58-47D3-A444-1D6BB977307E} - System32\Tasks\LaunchSignup => C:\Program Files (x86)\MyPC Backup\Signup Wizard.exe <==== ATTENTION
Task: {0EAFE13B-AAEC-4BE3-9FD1-4360D98D46CF} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {1AAFF332-5C62-4558-9991-DAA649C4C9C5} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {1F069D73-D2DA-4AAF-A370-6B1C036D7A3D} - System32\Tasks\EgisUpdate => C:\Program Files\EgisTec IPS\EgisUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {23A5D8BE-9196-40EB-BD89-794398B2B073} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {256F12C7-092E-4EB0-8B9F-3F8830C690B4} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {2E7902A6-8882-4198-8691-EFDA3509131C} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-4 => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-4.exe [2014-08-22] (CinemAPP)
Task: {3503C0C0-163D-476B-BC9C-9FF2CB0BD6F3} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [2012-08-22] (Acer Incorporated)
Task: {35517B67-790C-4C2A-8296-8500D97D4BB2} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5 => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-5.exe [2014-08-22] (CinemAPP)
Task: {3B04812C-632E-440A-9B5B-B3AEF5B353AF} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [2012-08-23] ()
Task: {41ADC154-DDE2-4788-8C6D-03E27BFD12E2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-23] (Google Inc.)
Task: {4763C30D-506D-4985-88F0-9BF6852DC02D} - System32\Tasks\9907d779-26e0-4bcb-b3b5-d00ec154803b => C:\Program Files (x86)\CinemaP-1.4\9907d779-26e0-4bcb-b3b5-d00ec154803b.exe [2014-08-22] ()
Task: {4D3175CF-2931-4E93-9821-F30BDF47892D} - System32\Tasks\globalUpdateUpdateTaskMachineUA => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-23] (globalUpdate) <==== ATTENTION
Task: {5E11CE50-49FC-4611-B231-F3B3BFE06BBE} - System32\Tasks\Microsoft\Windows\Setup\Pre-staged GDR Notification => C:\Windows\system32\NotificationUI.exe [2014-04-19] (Microsoft Corporation)
Task: {6D793040-3CD7-4EBF-889D-B4832A3424CB} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5_user => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-5.exe [2014-08-22] (CinemAPP)
Task: {7F9C0B6D-E918-435D-8700-F4731B6CA114} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-1 => C:\Program Files (x86)\CinemaP-1.4\CinemaP-1.4-codedownloader.exe [2014-08-22] (CinemAPP)
Task: {83694A9B-D150-4F7B-A32C-DEA7FDB5480C} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-11 => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-11.exe [2014-08-22] (CinemAPP)
Task: {8C09B648-150A-40C7-9B07-0CEB33C400FF} - System32\Tasks\6d220f6a-c569-44f9-9fa1-789a4a59b036 => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-4.exe [2014-08-22] (CinemAPP)
Task: {A72208BF-7A49-4FB8-B684-252375F3443A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {A8B00D79-8CF9-41AD-B6D0-0A0BC4C759A2} - System32\Tasks\Recovery Management\Notification => C:\Program Files\Acer\Acer Recovery Management\Notification\Notification.exe [2012-07-31] (Acer Incorporated)
Task: {B7FF15ED-EA7E-4BD3-861B-A8B8547E91C3} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [2012-07-04] (CyberLink)
Task: {B8F8F060-1187-4860-AC4D-F7B30978B43B} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {C29914B2-FB69-4A6D-ADCA-C1C36A633DD5} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2012-08-30] ()
Task: {C6A88F2D-53D2-4805-9D69-443738A1847C} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {CB879B12-6D35-4E95-A8CA-B013C6C23D5C} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: {CEDAB060-F54A-42B8-BFD4-65CDCA82D8CE} - System32\Tasks\PMMUpdate => C:\Program Files\EgisTec IPS\PMMUpdate.exe [2012-07-12] (Egis Technology Inc.)
Task: {DAF3C5A9-0157-4433-8D83-5C792982BE79} - System32\Tasks\49d67866-bcb1-4ace-8197-ee18e665e23b => C:\Program Files (x86)\CinemaP-1.4\49d67866-bcb1-4ace-8197-ee18e665e23b.exe [2014-08-22] (CinemAPP)
Task: {E1B232EC-44E8-4A4C-974B-D2ECB59CF591} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [2012-08-23] ()
Task: {E2DF0689-E165-4F34-9B7A-ACD012260B90} - System32\Tasks\globalUpdateUpdateTaskMachineCore => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2014-08-23] (globalUpdate) <==== ATTENTION
Task: {E3A2E92C-8A5E-469E-83FB-DFCC1F111F33} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2012-06-22] ()
Task: {EBF06DEC-4228-4813-AC0C-62821AE4E330} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {F0841E03-9084-436B-ACB7-1DA4DD8A587A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-08-23] (Google Inc.)
Task: {F149AD60-CF1B-4C5C-8D54-6B32257CF261} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {FA824550-9A8D-4A6F-BBEC-E453E358908A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2014-07-31] (Microsoft Corporation)
Task: {FEC1A0EF-8AE0-4E1B-83C2-27AA45BBBFC0} - System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-3 => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-3.exe [2014-08-22] (CinemAPP)
Task: C:\WINDOWS\Tasks\49d67866-bcb1-4ace-8197-ee18e665e23b.job => C:\Program Files (x86)\CinemaP-1.4\49d67866-bcb1-4ace-8197-ee18e665e23b.exe
Task: C:\WINDOWS\Tasks\6d220f6a-c569-44f9-9fa1-789a4a59b036.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-4.exe
Task: C:\WINDOWS\Tasks\9907d779-26e0-4bcb-b3b5-d00ec154803b.job => C:\Program Files (x86)\CinemaP-1.4\9907d779-26e0-4bcb-b3b5-d00ec154803b.exe
Task: C:\WINDOWS\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-1.job => C:\Program Files (x86)\CinemaP-1.4\CinemaP-1.4-codedownloader.exe
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-11.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-11.exe
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-2.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-2.exe
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-3.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-3.exe
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-4.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-4.exe
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-5.exe
Task: C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5_user.job => C:\Program Files (x86)\CinemaP-1.4\b19169a4-fca4-42fc-9e6d-779138f20658-5.exe
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (whitelisted) =============

2013-09-05 02:36 - 2013-09-05 02:36 - 00013088 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2012-09-26 11:22 - 2013-08-30 00:43 - 00097568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-08-23 13:22 - 2014-08-23 13:22 - 00709120 _____ () C:\Program Files\005\hzunyanhtn64.exe
2014-08-23 09:30 - 2014-08-23 09:30 - 00709120 _____ () C:\Program Files\005\vulsrsebjh64.exe
2014-08-22 23:58 - 2014-08-22 23:58 - 00031608 _____ () C:\Program Files (x86)\CinemaP-1.4\9907d779-26e0-4bcb-b3b5-d00ec154803b.exe
2014-07-28 18:17 - 2014-08-23 13:23 - 00098816 _____ () C:\Program Files (x86)\SupTab\WindowsSupportDll64.dll
2012-06-22 03:12 - 2012-06-22 03:12 - 01407568 _____ () C:\Program Files (x86)\EgisTec MyWinLocker\x64\LIBEAY32.dll
2012-07-26 09:58 - 2012-07-26 09:53 - 00170864 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2014-07-28 18:17 - 2014-08-23 13:23 - 00724480 _____ () C:\Program Files (x86)\SupTab\HpUI.exe
2014-07-16 11:16 - 2014-07-16 11:16 - 00064000 _____ () C:\Program Files (x86)\SupTab\Loader32.exe
2014-07-16 10:55 - 2014-07-16 10:55 - 00073216 _____ () C:\Program Files (x86)\SupTab\Loader64.exe
2012-09-03 13:50 - 2012-08-08 17:48 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2012-08-10 18:28 - 2012-08-10 18:28 - 00384128 _____ () C:\Program Files (x86)\Bluetooth Suite\ContactsApi.dll
2012-08-10 18:23 - 2012-08-10 18:23 - 00020992 _____ () C:\Program Files (x86)\Bluetooth Suite\L10n\de-DE\BtTray.de-DE.dll
2012-08-23 00:04 - 2012-08-23 00:04 - 00044176 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
2012-08-23 00:04 - 2012-08-23 00:04 - 00025232 _____ () C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
2012-08-23 08:26 - 2012-08-23 08:26 - 00465384 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\sqlite3.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00125504 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\MailConverter32.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00155712 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\VolumeSnapshot.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00118336 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\Online.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 01081408 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\ACE.dll
2012-08-23 08:25 - 2012-08-23 08:25 - 00052288 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OsSettingPort.dll
2012-08-23 08:26 - 2012-08-23 08:26 - 00727616 _____ () C:\Program Files (x86)\NTI\Acer Backup Manager\OutlookShadow.dll
2014-07-28 18:17 - 2014-08-23 13:23 - 00086016 _____ () C:\Program Files (x86)\SupTab\WindowsSupportDll32.dll
2012-09-26 11:29 - 2012-06-25 19:41 - 01198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 00051720 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\chrome_elf.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 00908808 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\libglesv2.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 00108552 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\libegl.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 04008040 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\pdf.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 00460808 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\ppGoogleNaClPluginChrome.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 01915400 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\ffmpegsumo.dll
2014-08-22 23:36 - 2014-08-22 23:36 - 00645592 _____ () C:\Users\Sacha\AppData\Local\Torch\User Data\Default\Extensions\dipchieogpecpggdacaaffcjemkggfbi\1.0.0.7593_0\plugin\sqlite3.dll
2014-08-22 23:07 - 2014-07-10 04:46 - 13692232 _____ () C:\Users\Sacha\AppData\Local\Torch\Application\33.0.0.7326\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\Users\Sacha\SkyDrive:ms-properties

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"

==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)


==================== Faulty Device Manager Devices =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (09/02/2014 08:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: McSvHost.exe, Version: 3.8.703.0, Zeitstempel: 0x51f7deae
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16912, Zeitstempel: 0x536464ba
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000413e0
ID des fehlerhaften Prozesses: 0x6b20
Startzeit der fehlerhaften Anwendung: 0xMcSvHost.exe0
Pfad der fehlerhaften Anwendung: McSvHost.exe1
Pfad des fehlerhaften Moduls: McSvHost.exe2
Berichtskennung: McSvHost.exe3
Vollständiger Name des fehlerhaften Pakets: McSvHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: McSvHost.exe5

Error: (08/30/2014 08:10:14 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {a7ee8cea-886e-4d53-a6ad-b97707973cf4}

Error: (08/28/2014 07:19:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: McSvHost.exe, Version: 3.8.703.0, Zeitstempel: 0x51f7deae
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.2.9200.16912, Zeitstempel: 0x536464ba
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000413e0
ID des fehlerhaften Prozesses: 0xaf0
Startzeit der fehlerhaften Anwendung: 0xMcSvHost.exe0
Pfad der fehlerhaften Anwendung: McSvHost.exe1
Pfad des fehlerhaften Moduls: McSvHost.exe2
Berichtskennung: McSvHost.exe3
Vollständiger Name des fehlerhaften Pakets: McSvHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: McSvHost.exe5

Error: (08/28/2014 08:08:45 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex (3488) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (08/28/2014 08:08:45 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhostex (3488) WebCacheLocal: Versuch, Datei "C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (08/28/2014 08:08:35 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex (3488) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (08/28/2014 08:08:35 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhostex (3488) WebCacheLocal: Versuch, Datei "C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (08/28/2014 08:08:25 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex (3488) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log.

Error: (08/28/2014 08:08:25 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhostex (3488) WebCacheLocal: Versuch, Datei "C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log" für den Lesezugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.

Error: (08/28/2014 08:08:15 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex (3488) WebCacheLocal: Fehler -1032 (0xfffffbf8) beim Öffnen von Protokolldatei C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log.


System errors:
=============
Error: (09/03/2014 07:48:02 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎03.‎09.‎2014 um 07:25:35 unerwartet heruntergefahren.

Error: (09/03/2014 00:24:36 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (09/03/2014 00:24:35 AM) (Source: DCOM) (EventID: 10010) (User: EAMBAR)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (09/02/2014 08:25:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Anti-Spam Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/02/2014 08:25:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Proxy Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/02/2014 08:25:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Platform Services" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/02/2014 08:25:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee VirusScan Announcer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/02/2014 08:25:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Personal Firewall Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/02/2014 08:25:28 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee Home Network" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/02/2014 08:21:58 PM) (Source: DCOM) (EventID: 10010) (User: EAMBAR)
Description: {209500FC-6B45-4693-8871-6296C4843751}


Microsoft Office Sessions:
=========================
Error: (09/02/2014 08:25:11 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: McSvHost.exe3.8.703.051f7deaentdll.dll6.2.9200.16912536464bac000000500000000000413e06b2001cfc6daeb3f7f01C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exeC:\WINDOWS\SYSTEM32\ntdll.dll79517afe-32ce-11e4-be92-68942378f476

Error: (08/30/2014 08:10:14 PM) (Source: VSS) (EventID: 8194) (User: )
Description: 0x80070005, Zugriff verweigert


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {a7ee8cea-886e-4d53-a6ad-b97707973cf4}

Error: (08/28/2014 07:19:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: McSvHost.exe3.8.703.051f7deaentdll.dll6.2.9200.16912536464bac000000500000000000413e0af001cfc29546b4e921C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exeC:\WINDOWS\SYSTEM32\ntdll.dll70765e74-2ed7-11e4-be87-68942378f476

Error: (08/28/2014 08:08:45 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (08/28/2014 08:08:45 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (08/28/2014 08:08:35 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (08/28/2014 08:08:35 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (08/28/2014 08:08:25 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)

Error: (08/28/2014 08:08:25 AM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)32 (0x00000020)Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.

Error: (08/28/2014 08:08:15 AM) (Source: ESENT) (EventID: 455) (User: )
Description: taskhostex3488WebCacheLocal: C:\Users\Sacha\AppData\Local\Microsoft\Windows\WebCache\V01.log-1032 (0xfffffbf8)


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
Percentage of memory in use: 44%
Total physical RAM: 8007.27 MB
Available physical RAM: 4422.02 MB
Total Pagefile: 9223.27 MB
Available Pagefile: 5135.53 MB
Total Virtual: 8192 MB
Available Virtual: 8191.78 MB

==================== Drives ================================

Drive c: (Acer) (Fixed) (Total:679.85 GB) (Free:76.36 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 3A4B9B6F)

Partition: GPT Partition Type.

==================== End Of Log ============================

--- --- ---

cosinus · 03.09.2014, 15:53

Das erste Log (FRST.txt) ist leider unvollständig, bitte erneut und vollständig posten

Telcorion · 03.09.2014, 16:28

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 01
Ran by Sacha (administrator) on EAMBAR on 03-09-2014 16:32:59
Running from C:\Users\Sacha\Desktop
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal



==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
() C:\Program Files\005\hzunyanhtn64.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(TorchMedia Inc.) C:\Users\Sacha\AppData\Local\Torch\Update\TorchCrashHandler.exe
() C:\Program Files\005\vulsrsebjh64.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
() C:\Program Files (x86)\CinemaP-1.4\9907d779-26e0-4bcb-b3b5-d00ec154803b.exe
(CinemAPP) C:\Program Files (x86)\CinemaP-1.4\49d67866-bcb1-4ace-8197-ee18e665e23b.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Update\33.0.0.7326\TorchUpdate.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Hola Networks Ltd.) C:\Users\Sacha\AppData\Local\Torch\Plugins\Hola\hola_plugin_x64.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(McAfee, Inc.) C:\Program Files\mcafee\msm\McSmtFwk.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\Core\mchost.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(Torch Media Inc.) C:\Users\Sacha\AppData\Local\Torch\Application\torch.exe
(McAfee, Inc.) C:\Program Files\mcafee\virusscan\mcods.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-10] ()
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-2359974274-1062960934-2306791803-1009\...\RunOnce: [RegAutoPlay] => C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-21] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://istart.webssearches.com/?type=sc&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKLM-x32 - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
SearchScopes: HKCU - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = 
BHO: CinemaP-1.4 -> {11111111-1111-1111-1111-110611171162} -> C:\Program Files (x86)\CinemaP-1.4\CinemaP-1.4-bho64.dll (CinemAPP)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: CinemaP-1.4 -> {11111111-1111-1111-1111-110611171162} -> C:\Program Files (x86)\CinemaP-1.4\CinemaP-1.4-bho.dll (CinemAPP)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin-x32: TorchVLC -> C:\Users\Sacha\AppData\Local\Torch\Plugins\Video\VLC\npvlc.dll (VideoLAN)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2012-09-03]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2012-09-03]

Chrome: 
=======
CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
CHR StartupUrls: Default -> "hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T"
CHR NewTab: Default -> "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: Default -> webssearches
CHR DefaultSearchProvider: Default -> webssearches
CHR DefaultSearchURL: Default -> hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-23]
CHR Extension: (Google Drive) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-23]
CHR Extension: (YouTube) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-23]
CHR Extension: (Google-Suche) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-23]
CHR Extension: (SiteAdvisor) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-08-23]
CHR Extension: (CinemaP-1.4) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb [2014-08-23]
CHR Extension: (Google Wallet) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-23]
CHR Extension: (Quick start) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-23]
CHR Extension: (Google Mail) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-20] (Broadcom Corp.) [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-23] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-23] (globalUpdate) [File not signed]
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 hzunyanhtn64; C:\Program Files\005\hzunyanhtn64.exe [709120 2014-08-23] () [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [694784 2014-08-23] (Cherished Technololgy LIMITED) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-23] (NTI Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-26] (Dritek System INC.)
R2 TorchCrashHandler; C:\Users\Sacha\AppData\Local\Torch\Update\TorchCrashHandler.exe [1216520 2014-07-10] (TorchMedia Inc.)
R2 vulsrsebjh64; C:\Program Files\005\vulsrsebjh64.exe [709120 2014-08-23] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-08-01] (Atheros)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [117632 2013-06-01] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-26] (Dritek System Inc.)
R1 {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64; C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys [61008 2014-08-21] (StdLib)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

Code:

ATTFilter

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-03 16:32 - 2014-09-03 16:33 - 00027700 _____ () C:\Users\Sacha\Desktop\FRST.txt
2014-09-03 16:32 - 2014-09-03 16:33 - 00000000 ____D () C:\FRST
2014-09-03 16:15 - 2014-09-03 16:15 - 02104832 _____ (Farbar) C:\Users\Sacha\Desktop\FRST64.exe
2014-09-03 07:54 - 2014-09-03 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-09-02 08:14 - 2014-09-03 16:36 - 00000000 ____D () C:\Users\Sacha\Desktop\Got
2014-08-30 20:11 - 2014-08-30 20:11 - 00001304 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00001292 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00000000 ____D () C:\Program Files\paint.net
2014-08-30 20:10 - 2014-08-30 20:15 - 00000000 ____D () C:\Users\Sacha\AppData\Local\paint.net
2014-08-30 20:09 - 2014-08-30 20:09 - 06272852 _____ () C:\Users\Sacha\Downloads\paint.net.4.0.3.install.zip
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\CyberLink
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Software
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Cyberlink
2014-08-30 10:18 - 2014-09-03 15:07 - 00000000 ____D () C:\Users\Sacha\AppData\Local\clear.fi
2014-08-28 07:48 - 2012-08-30 13:37 - 02213776 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\ETDUninst.dll
2014-08-27 22:52 - 2014-08-23 08:47 - 04036096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:52 - 2014-07-16 01:03 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-27 22:52 - 2014-07-12 04:36 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-08-27 22:39 - 2014-08-27 22:45 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-08-27 22:30 - 2014-08-27 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000020 ___SH () C:\Users\UpdatusUser.000\ntuser.ini
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-26 17:49 - 2014-08-26 17:49 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-08-26 17:45 - 2014-08-27 22:54 - 00354392 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-26 12:33 - 2014-08-28 06:57 - 00000000 ____D () C:\Users\Sacha\AppData\Local\CrashDumps
2014-08-26 09:10 - 2014-08-26 09:10 - 00000947 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-08-25 21:29 - 2014-08-25 21:29 - 00001443 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2014-08-25 21:13 - 2014-08-02 02:15 - 00704480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-08-25 21:13 - 2014-08-02 02:15 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-25 15:10 - 2014-07-16 00:51 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-08-25 12:12 - 2014-08-29 19:19 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\TS3Client
2014-08-25 12:11 - 2014-08-25 12:11 - 00001130 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-08-25 11:15 - 2014-09-03 00:36 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Awesomium
2014-08-24 18:10 - 2014-08-24 18:10 - 00000000 ____D () C:\ProgramData\Elder Scrolls Online
2014-08-24 08:48 - 2014-08-24 08:48 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-24 08:40 - 2014-08-24 08:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-24 08:25 - 2014-08-24 08:25 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-08-23 20:05 - 2014-08-23 20:05 - 00003092 _____ () C:\WINDOWS\System32\Tasks\{BAF8FCAB-FCC2-4F02-8397-4DD1DEE11862}
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\WINDOWS\jre
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2014-08-23 16:07 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-08-23 14:57 - 2014-08-23 16:09 - 00000000 ____D () C:\ESO
2014-08-23 14:57 - 2014-08-23 16:08 - 00000000 ___HD () C:\Program Files (x86)\Zero G Registry
2014-08-23 14:38 - 2014-08-26 14:39 - 00000376 _____ () C:\WINDOWS\Tasks\APSnotifierPP3.job
2014-08-23 14:38 - 2014-08-24 14:39 - 00000376 _____ () C:\WINDOWS\Tasks\APSnotifierPP2.job
2014-08-23 14:38 - 2014-08-23 15:01 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP1.job
2014-08-23 14:38 - 2014-08-23 14:39 - 00002808 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP1
2014-08-23 14:38 - 2014-08-23 14:39 - 00002806 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP3
2014-08-23 14:38 - 2014-08-23 14:39 - 00002806 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP2
2014-08-23 14:38 - 2014-08-23 14:38 - 00000000 _____ () C:\Users\Sacha\AppData\Roaming\aps.uninstall.scan.results
2014-08-23 14:34 - 2014-08-23 14:34 - 00631560 _____ (ClickMeIn Limited) C:\Users\Sacha\AppData\Local\nsp2507.tmp
2014-08-23 14:01 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-08-23 14:01 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-08-23 14:01 - 2013-06-17 00:41 - 00997632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-08-23 14:01 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-08-23 14:01 - 2013-06-01 13:26 - 00327936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-08-23 14:01 - 2013-06-01 12:24 - 02106176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-08-23 14:01 - 2013-06-01 11:25 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2014-08-23 14:01 - 2013-06-01 11:24 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-23 14:01 - 2013-06-01 11:24 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2014-08-23 14:01 - 2013-06-01 11:24 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2014-08-23 14:01 - 2013-06-01 11:23 - 01842176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-08-23 14:01 - 2013-06-01 11:23 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-08-23 14:01 - 2013-06-01 11:22 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-08-23 14:01 - 2013-06-01 11:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2014-08-23 14:01 - 2013-06-01 11:21 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-08-23 14:01 - 2013-06-01 11:21 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 02219520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 01527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2014-08-23 14:01 - 2013-06-01 11:19 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-08-23 14:01 - 2013-06-01 11:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2014-08-23 14:01 - 2013-06-01 05:08 - 00117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2DP.sys
2014-08-23 14:01 - 2013-06-01 05:08 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2014-08-23 14:01 - 2013-05-25 00:09 - 01403296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-08-23 14:01 - 2013-05-25 00:09 - 01271584 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-08-23 14:01 - 2013-05-25 00:09 - 01217352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-08-23 14:01 - 2013-05-25 00:09 - 01093904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-08-23 14:00 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-08-23 14:00 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-08-23 14:00 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2014-08-23 14:00 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-08-23 14:00 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-08-23 14:00 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-08-23 14:00 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-08-23 14:00 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-08-23 13:49 - 2014-04-03 05:44 - 00619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-08-23 13:49 - 2014-04-01 00:08 - 00387268 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-08-23 13:49 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-08-23 13:49 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-08-23 13:48 - 2012-09-27 09:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2014-08-23 13:48 - 2012-09-27 09:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2014-08-23 13:48 - 2012-09-27 09:15 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2014-08-23 13:48 - 2012-09-27 08:35 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2014-08-23 13:48 - 2012-09-27 08:35 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2014-08-23 13:48 - 2012-09-27 08:34 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2014-08-23 13:46 - 2012-09-20 09:55 - 03265256 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2014-08-23 13:45 - 2012-09-20 10:40 - 00389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-08-23 13:45 - 2012-09-20 09:55 - 00533224 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2014-08-23 13:45 - 2012-09-20 08:47 - 00307192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 03964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2014-08-23 13:45 - 2012-09-20 08:33 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-23 13:45 - 2012-09-20 08:33 - 01513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2014-08-23 13:45 - 2012-09-20 08:32 - 01739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2014-08-23 13:45 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-08-23 13:45 - 2012-09-20 08:32 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2014-08-23 13:45 - 2012-09-20 08:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2014-08-23 13:45 - 2012-09-20 08:31 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2014-08-23 13:45 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-08-23 13:45 - 2012-09-20 08:30 - 00634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2014-08-23 13:45 - 2012-09-20 07:55 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-08-23 13:45 - 2012-09-20 07:54 - 01196032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2014-08-23 13:45 - 2012-09-20 07:54 - 00709632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-08-23 13:45 - 2012-09-20 07:53 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2014-08-23 13:44 - 2012-09-20 10:31 - 00425192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2014-08-23 13:44 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2014-08-23 13:44 - 2012-09-20 08:33 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2014-08-23 13:44 - 2012-09-20 08:33 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-08-23 13:44 - 2012-09-20 08:33 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2014-08-23 13:44 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2014-08-23 13:44 - 2012-09-20 08:32 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-08-23 13:44 - 2012-09-20 08:30 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
2014-08-23 13:44 - 2012-09-20 07:55 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2014-08-23 13:44 - 2012-09-20 07:53 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2014-08-23 13:43 - 2012-09-20 11:08 - 00027280 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 01342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2014-08-23 13:43 - 2012-09-20 08:32 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-08-23 13:43 - 2012-09-20 08:30 - 02016256 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2014-08-23 13:43 - 2012-09-20 08:30 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2014-08-23 13:43 - 2012-09-20 08:30 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2014-08-23 13:43 - 2012-09-20 08:30 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2014-08-23 13:43 - 2012-09-20 08:13 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-08-23 13:43 - 2012-09-20 08:13 - 00023656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2014-08-23 13:43 - 2012-09-20 08:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2014-08-23 13:43 - 2012-09-20 07:55 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2014-08-23 13:43 - 2012-09-20 07:55 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2014-08-23 13:43 - 2012-09-20 07:55 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2014-08-23 13:43 - 2012-09-20 07:55 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2014-08-23 13:43 - 2012-09-20 07:54 - 01369600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 02007040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2014-08-23 13:43 - 2012-09-20 07:53 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2014-08-23 13:43 - 2012-09-20 06:10 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-08-23 13:31 - 2013-10-05 08:10 - 00285016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-08-23 13:31 - 2013-10-02 04:50 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-23 13:31 - 2013-09-28 07:48 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-08-23 13:31 - 2013-09-28 05:58 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-08-23 13:31 - 2013-08-30 07:19 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-08-23 13:31 - 2013-08-30 07:18 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-08-23 13:31 - 2013-08-30 01:48 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-08-23 13:31 - 2013-08-30 01:47 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-08-23 13:24 - 2014-08-23 13:24 - 00004022 _____ () C:\WINDOWS\System32\Tasks\LaunchSignup
2014-08-23 13:24 - 2013-09-14 00:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2014-08-23 13:24 - 2013-09-14 00:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-08-23 13:24 - 2013-08-30 07:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2014-08-23 13:24 - 2013-08-30 07:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2014-08-23 13:24 - 2013-08-30 01:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2014-08-23 13:24 - 2013-08-21 08:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-08-23 13:24 - 2013-08-10 08:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2014-08-23 13:24 - 2013-07-25 01:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-23 13:24 - 2013-07-25 01:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-23 13:24 - 2012-09-20 08:48 - 00062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2014-08-23 13:23 - 2014-08-23 13:23 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-08-23 13:23 - 2014-08-23 13:23 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-08-23 13:23 - 2014-08-23 13:23 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-08-23 13:14 - 2014-08-23 13:21 - 00000000 ____D () C:\Program Files (x86)\hdvidcodec.com
2014-08-23 13:14 - 2014-08-23 13:14 - 00000846 _____ () C:\Users\Public\Desktop\HDVidCodec.lnk
2014-08-23 13:14 - 2014-08-23 13:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com
2014-08-23 13:13 - 2014-08-23 13:13 - 00411336 _____ () C:\Users\Sacha\Downloads\HDvid-codec-Chrome.exe
2014-08-23 13:12 - 2014-08-23 13:12 - 00448856 _____ () C:\Users\Sacha\Downloads\atdhd_download.exe
2014-08-23 13:11 - 2012-10-12 08:13 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2014-08-23 13:11 - 2012-10-12 07:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll
2014-08-23 13:10 - 2012-10-24 06:54 - 00396008 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-23 13:10 - 2012-10-17 06:32 - 01172992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2014-08-23 13:10 - 2012-10-17 06:32 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2014-08-23 13:10 - 2012-10-17 06:32 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-08-23 13:10 - 2012-10-17 05:57 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2014-08-23 13:10 - 2012-10-17 05:57 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2014-08-23 13:10 - 2012-10-17 05:57 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-08-23 13:09 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-08-23 13:08 - 2012-10-11 09:47 - 00793200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-08-23 13:08 - 2012-10-11 09:23 - 00441576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-08-23 13:08 - 2012-10-11 07:46 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2014-08-23 13:08 - 2012-10-11 07:45 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2014-08-23 13:08 - 2012-10-11 07:42 - 00612416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-08-23 13:08 - 2012-10-11 07:07 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2014-08-23 13:08 - 2012-10-11 07:07 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2014-08-23 13:08 - 2012-10-11 02:45 - 00478424 _____ () C:\WINDOWS\SysWOW64\locale.nls
2014-08-23 13:08 - 2012-10-11 02:44 - 00478424 _____ () C:\WINDOWS\system32\locale.nls
2014-08-23 13:07 - 2012-10-11 09:25 - 00056552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-08-23 13:07 - 2012-10-11 09:13 - 00033512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2014-08-23 13:07 - 2012-10-11 07:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2014-08-23 13:07 - 2012-10-11 07:45 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2014-08-23 13:07 - 2012-10-11 07:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2014-08-23 13:07 - 2012-10-11 07:44 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2014-08-23 13:07 - 2012-10-11 07:44 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2014-08-23 13:07 - 2012-10-11 07:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 01280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-23 13:07 - 2012-10-11 07:23 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll
2014-08-23 13:07 - 2012-10-11 07:23 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll
2014-08-23 13:07 - 2012-10-11 07:07 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2014-08-23 13:07 - 2012-10-11 07:07 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-23 13:07 - 2012-10-11 07:05 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2014-08-23 13:07 - 2012-10-11 06:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll
2014-08-23 13:03 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2014-08-23 13:03 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2014-08-23 13:03 - 2012-11-27 06:19 - 01536512 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-08-23 13:03 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2014-08-23 13:02 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-08-23 13:02 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-08-23 13:02 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-08-23 13:02 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-08-23 13:02 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-08-23 13:02 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-08-23 13:02 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanadvui.dll
2014-08-23 13:02 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-08-23 13:02 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-08-23 13:02 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-08-23 13:02 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-08-23 13:02 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-08-23 13:02 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
2014-08-23 13:02 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe
2014-08-23 13:02 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-08-23 13:02 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-08-23 13:02 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2014-08-23 13:02 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2014-08-23 13:02 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2014-08-23 13:02 - 2013-06-25 00:54 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-08-23 13:02 - 2013-06-25 00:54 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-08-23 13:02 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2014-08-23 13:02 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2014-08-23 13:02 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2014-08-23 13:02 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2014-08-23 13:02 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2014-08-23 13:02 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2014-08-23 13:02 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-08-23 13:02 - 2012-11-27 06:20 - 01217536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-08-23 13:02 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2014-08-23 13:02 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
2014-08-23 13:02 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-08-23 13:02 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2014-08-23 13:02 - 2012-10-02 09:34 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2014-08-23 13:02 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2014-08-23 13:02 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2014-08-23 12:52 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-08-23 12:52 - 2014-05-03 08:33 - 01824808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-23 12:52 - 2014-05-03 06:51 - 01408976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-23 12:52 - 2014-05-02 00:37 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-23 12:52 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-23 12:52 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-23 12:52 - 2014-04-24 01:51 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-08-23 12:52 - 2014-04-24 01:51 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-23 12:52 - 2014-04-24 01:38 - 00693760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-08-23 12:52 - 2014-04-24 01:38 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-23 12:52 - 2013-10-31 07:56 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2014-08-23 12:52 - 2013-10-31 07:56 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2014-08-23 12:52 - 2013-10-31 06:01 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2014-08-23 12:52 - 2013-10-31 05:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2014-08-23 12:52 - 2013-10-13 22:49 - 00100696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2014-08-23 12:52 - 2013-08-27 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-23 12:52 - 2013-08-27 07:19 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-08-23 12:52 - 2013-08-27 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-23 12:52 - 2013-08-27 00:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-08-23 12:52 - 2012-10-11 07:46 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2014-08-23 12:52 - 2012-10-11 07:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2014-08-23 12:52 - 2012-10-11 07:07 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2014-08-23 12:42 - 2013-04-09 06:51 - 14267904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-08-23 12:42 - 2013-04-09 06:51 - 03552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-08-23 12:42 - 2013-04-09 06:50 - 02107904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-08-23 12:42 - 2013-04-08 23:52 - 11878912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2014-08-23 12:41 - 2013-04-09 07:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-08-23 12:41 - 2013-04-09 07:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-08-23 12:41 - 2013-04-09 07:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-08-23 12:41 - 2013-04-09 07:20 - 00306952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll
2014-08-23 12:41 - 2013-04-09 07:20 - 00086280 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2014-08-23 12:41 - 2013-04-09 07:18 - 00077960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdvm.dll
2014-08-23 12:41 - 2013-04-09 06:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-08-23 12:41 - 2013-04-09 06:52 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-08-23 12:41 - 2013-04-09 06:52 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-08-23 12:41 - 2013-04-09 06:52 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-08-23 12:41 - 2013-04-09 06:51 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2014-08-23 12:41 - 2013-04-09 06:51 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-08-23 12:41 - 2013-04-09 06:51 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-08-23 12:41 - 2013-04-09 06:51 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenuineCenter.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 01444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
2014-08-23 12:41 - 2013-04-09 06:48 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-08-23 12:41 - 2013-04-09 04:34 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2014-08-23 12:41 - 2013-04-09 04:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2014-08-23 12:41 - 2013-04-09 04:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-08-23 12:41 - 2013-04-09 04:31 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2014-08-23 12:41 - 2013-04-09 01:44 - 00123880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2014-08-23 12:41 - 2013-04-09 01:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-08-23 12:41 - 2013-04-09 01:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-08-23 12:41 - 2013-04-08 23:52 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2014-08-23 12:41 - 2013-04-08 23:52 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2014-08-23 12:41 - 2013-04-08 23:52 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2014-08-23 12:41 - 2013-04-08 23:51 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
2014-08-23 12:41 - 2013-04-05 01:30 - 00503080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-08-23 12:41 - 2013-03-16 00:05 - 00298456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-23 12:41 - 2013-03-16 00:05 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-23 12:41 - 2013-02-02 10:40 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2014-08-23 12:41 - 2012-12-13 05:59 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2014-08-23 12:41 - 2012-10-11 07:44 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2014-08-23 12:41 - 2012-10-11 07:44 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2014-08-23 12:41 - 2012-10-11 07:06 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2014-08-23 12:41 - 2012-10-11 07:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2014-08-23 12:41 - 2012-09-20 08:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe
2014-08-23 12:41 - 2012-09-20 08:33 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndptsp.tsp
2014-08-23 12:41 - 2012-09-20 08:33 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2014-08-23 12:41 - 2012-09-20 08:32 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2014-08-23 12:41 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll
2014-08-23 12:41 - 2012-09-20 08:12 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2014-08-23 12:41 - 2012-09-20 08:09 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2014-08-23 12:41 - 2012-09-20 07:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndptsp.tsp
2014-08-23 12:41 - 2012-09-20 07:55 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2014-08-23 12:41 - 2012-09-20 07:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2014-08-23 12:41 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2014-08-23 12:41 - 2012-09-20 07:32 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2014-08-23 12:40 - 2013-01-10 03:40 - 00303848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-08-23 12:40 - 2012-12-13 06:00 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2014-08-23 12:39 - 2013-02-02 10:23 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2014-08-23 09:59 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-08-23 09:59 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2014-08-23 09:59 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2014-08-23 09:59 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2014-08-23 09:59 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2014-08-23 09:59 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2014-08-23 09:59 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2014-08-23 09:59 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-08-23 09:59 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2014-08-23 09:59 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-08-23 09:59 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-08-23 09:59 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL
2014-08-23 09:59 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL
2014-08-23 09:58 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2014-08-23 09:58 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2014-08-23 09:58 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2014-08-23 09:58 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2014-08-23 09:58 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2014-08-23 09:58 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2014-08-23 09:58 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-08-23 09:58 - 2012-11-06 09:33 - 00522640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-08-23 09:58 - 2012-11-06 07:00 - 00463768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-08-23 09:58 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2014-08-23 09:58 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2014-08-23 09:58 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2014-08-23 09:58 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2014-08-23 09:58 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2014-08-23 09:58 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2014-08-23 09:58 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2014-08-23 09:58 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-08-23 09:58 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-08-23 09:58 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fxppm.sys
2014-08-23 09:57 - 2014-05-29 06:04 - 00094552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2014-08-23 09:57 - 2014-05-08 03:34 - 00328024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-08-23 09:57 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-08-23 09:57 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2014-08-23 09:57 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2014-08-23 09:57 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-08-23 09:57 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-23 09:57 - 2014-02-27 01:18 - 00247808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-08-23 09:57 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-23 09:57 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-08-23 09:57 - 2013-11-26 01:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-08-23 09:47 - 2014-08-23 09:47 - 00001131 _____ () C:\WINDOWS\system32\netcfg-1893828.txt
2014-08-23 09:46 - 2014-08-23 09:46 - 00000000 ____D () C:\Users\Sacha\AppData\Local\BMExplorer
2014-08-23 09:39 - 2014-08-23 09:39 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-08-23 09:37 - 2014-05-20 04:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-08-23 09:37 - 2014-05-20 01:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-08-23 09:37 - 2014-05-20 01:45 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 03286528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 01623040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-08-23 09:36 - 2014-08-23 09:36 - 00001829 _____ () C:\Users\Sacha\Desktop\Microsoft Office 2013 - Verknüpfung.lnk
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Deployment
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Apps\2.0
2014-08-23 09:36 - 2014-05-15 00:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-08-23 09:36 - 2014-05-15 00:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-08-23 09:36 - 2014-05-15 00:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-08-23 09:36 - 2014-05-15 00:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Oracle
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\.snippingtool++
2014-08-23 09:33 - 2014-08-23 09:33 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Sun
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-23 09:31 - 2014-08-23 09:31 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\WinRAR
2014-08-23 09:29 - 2014-08-23 13:22 - 00000000 ____D () C:\Program Files\005
2014-08-23 09:28 - 2014-08-23 09:28 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Snipping Tool++.exe
2014-08-23 09:20 - 2014-08-24 08:22 - 00002273 _____ () C:\Users\Sacha\Desktop\Google Chrome.lnk
2014-08-23 08:56 - 2014-08-23 08:56 - 00000136 _____ () C:\WINDOWS\system32\netcfg-130468.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130250.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-128890.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000128 _____ () C:\WINDOWS\system32\netcfg-143203.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000136 _____ () C:\WINDOWS\system32\netcfg-293671.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293453.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293171.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000128 _____ () C:\WINDOWS\system32\netcfg-307750.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000136 _____ () C:\WINDOWS\system32\netcfg-245156.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-244812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-242812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000128 _____ () C:\WINDOWS\system32\netcfg-268281.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151921.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151859.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-141937.txt
2014-08-23 07:26 - 2014-08-23 07:30 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit
2014-08-23 07:07 - 2014-09-03 16:21 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-23 07:07 - 2014-08-23 07:16 - 00004094 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-23 07:07 - 2014-08-23 07:16 - 00003858 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-23 07:07 - 2014-08-23 07:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-23 07:06 - 2014-09-03 07:49 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-23 07:06 - 2014-08-25 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-23 07:06 - 2014-08-23 07:08 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-23 07:04 - 2014-08-23 07:04 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-08-23 07:03 - 2014-08-23 07:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-08-23 07:02 - 2014-08-23 07:03 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-08-23 07:02 - 2014-08-23 07:02 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-08-23 06:56 - 2014-08-25 18:31 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-23 06:56 - 2014-08-23 07:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-23 06:56 - 2014-08-23 06:56 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Microsoft Help
2014-08-23 03:56 - 2014-08-23 03:58 - 00000000 ____D () C:\WINDOWS\system32\MRT

2014-08-23 03:56 - 2014-08-23 03:58 - 00000000 ____D () C:\WINDOWS\system32\MRT

Telcorion · 03.09.2014, 16:31

Code:

ATTFilter

2014-08-23 03:56 - 2014-07-31 23:41 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-23 03:02 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-23 03:02 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-23 01:14 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2014-08-23 01:14 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2014-08-23 01:14 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-08-23 01:14 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-08-23 01:14 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-23 01:14 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-23 01:14 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-23 01:14 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-23 01:14 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-23 01:14 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2014-08-23 01:14 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2014-08-23 01:14 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2014-08-23 01:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2014-08-23 01:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2014-08-23 01:13 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-08-23 01:13 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-08-23 01:12 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-08-23 01:12 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-08-23 01:12 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-08-23 01:12 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-08-23 01:11 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-08-23 01:11 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-08-23 01:11 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2014-08-23 01:11 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2014-08-23 01:11 - 2013-05-04 08:59 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-08-23 01:11 - 2013-05-04 06:57 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2014-08-23 01:10 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-23 01:10 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-08-23 01:10 - 2014-01-13 01:30 - 02238976 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-08-23 01:10 - 2014-01-13 01:30 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-08-23 01:10 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-08-23 01:10 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-08-23 01:10 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-08-23 01:10 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-08-23 01:10 - 2013-05-04 09:58 - 00120736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-08-23 01:10 - 2013-05-04 08:59 - 01483776 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-08-23 01:10 - 2013-05-04 08:59 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2014-08-23 01:10 - 2013-05-04 08:58 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
2014-08-23 01:10 - 2013-05-04 08:56 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2014-08-23 01:10 - 2013-05-04 06:58 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2014-08-23 01:10 - 2013-05-04 06:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2014-08-23 01:10 - 2013-05-04 06:55 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2014-08-23 01:10 - 2013-05-04 06:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2014-08-23 01:10 - 2013-05-04 06:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-08-23 01:10 - 2013-05-04 06:47 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-08-23 01:10 - 2013-05-04 06:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-08-23 01:10 - 2013-02-02 10:39 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2014-08-23 01:10 - 2013-02-02 10:39 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2014-08-23 01:08 - 2013-05-15 04:25 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-08-23 01:08 - 2013-05-15 04:25 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-08-23 01:08 - 2013-05-15 04:24 - 00793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2014-08-23 01:08 - 2013-05-15 04:24 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-08-23 01:08 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2014-08-23 01:08 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2014-08-23 01:08 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2014-08-23 01:08 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2014-08-23 01:07 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-23 01:07 - 2014-06-05 19:30 - 10116608 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-08-23 01:07 - 2014-06-05 19:29 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-23 01:07 - 2014-06-05 19:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-23 01:07 - 2014-06-05 19:28 - 02306560 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-23 01:07 - 2014-06-05 19:28 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-23 01:07 - 2014-06-05 15:12 - 08857600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-08-23 01:07 - 2014-06-05 15:11 - 02416128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-23 01:07 - 2014-06-05 15:11 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-23 01:07 - 2014-06-05 15:10 - 02037760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-23 01:07 - 2014-06-05 15:10 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-23 01:07 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-08-23 01:07 - 2013-03-06 08:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-08-23 01:06 - 2012-11-03 07:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-08-23 01:06 - 2012-11-03 07:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-08-23 01:06 - 2012-11-03 07:24 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-08-23 01:06 - 2012-11-03 07:04 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2014-08-23 01:06 - 2012-11-03 07:04 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2014-08-23 01:06 - 2012-11-03 07:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2014-08-23 01:06 - 2012-11-03 07:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2014-08-23 01:06 - 2012-10-24 05:25 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2014-08-23 01:06 - 2012-10-24 05:24 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2014-08-23 01:06 - 2012-10-24 05:24 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2014-08-23 01:06 - 2012-10-24 05:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2014-08-23 01:06 - 2012-10-10 09:04 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2014-08-23 01:06 - 2012-10-10 08:31 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll
2014-08-23 01:05 - 2014-08-21 07:30 - 00061008 _____ (StdLib) C:\WINDOWS\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
2014-08-23 01:05 - 2013-03-02 12:57 - 00077544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2014-08-23 01:05 - 2013-03-02 12:39 - 00495336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-08-23 01:05 - 2013-03-02 12:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-08-23 01:05 - 2013-03-02 11:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-23 01:05 - 2013-03-02 10:23 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-08-23 01:05 - 2013-03-02 10:23 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2014-08-23 01:05 - 2013-03-02 10:23 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-08-23 01:05 - 2013-03-02 10:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll
2014-08-23 01:05 - 2013-03-02 10:22 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-08-23 01:05 - 2013-03-02 10:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2014-08-23 01:05 - 2013-03-02 10:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2014-08-23 01:05 - 2013-03-02 10:21 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 01149952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe
2014-08-23 01:05 - 2013-03-02 04:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-08-23 01:05 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-08-23 01:05 - 2013-03-02 04:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL
2014-08-23 01:05 - 2013-03-02 04:44 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatform.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2014-08-23 01:05 - 2013-03-02 04:43 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2014-08-23 01:05 - 2013-03-02 04:15 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2014-08-23 01:05 - 2013-03-01 06:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2014-08-23 01:05 - 2013-03-01 06:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2014-08-23 01:05 - 2013-03-01 06:55 - 01175040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-08-23 01:05 - 2013-01-09 05:59 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2014-08-23 01:05 - 2013-01-09 05:58 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2014-08-23 01:05 - 2012-11-06 06:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-08-23 01:05 - 2012-11-06 06:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wushareduxresources.dll
2014-08-23 01:04 - 2014-04-19 11:39 - 00628024 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2014-08-23 01:04 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-08-23 01:04 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-08-23 01:04 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2014-08-23 01:03 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2014-08-23 01:03 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-08-23 01:03 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-08-23 01:03 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-08-23 01:03 - 2013-08-16 07:20 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-08-23 01:03 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2014-08-23 01:03 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2014-08-23 01:03 - 2012-09-20 08:33 - 00110592 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-08-23 01:01 - 2013-02-02 10:38 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2014-08-23 01:01 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlroamextension.dll
2014-08-23 01:01 - 2013-02-02 10:21 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2014-08-23 01:01 - 2013-02-02 10:20 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2014-08-23 01:00 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-08-23 01:00 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2014-08-23 01:00 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2014-08-23 01:00 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2014-08-23 01:00 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-08-23 01:00 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2014-08-23 01:00 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlroamextension.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe
2014-08-23 01:00 - 2013-02-02 10:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe
2014-08-23 01:00 - 2013-02-02 10:39 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2014-08-23 01:00 - 2013-02-02 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe
2014-08-23 01:00 - 2013-02-02 10:24 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe
2014-08-23 01:00 - 2013-02-02 10:23 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2014-08-23 01:00 - 2013-02-02 10:23 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2014-08-23 01:00 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-08-23 01:00 - 2013-02-02 10:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2014-08-23 01:00 - 2013-02-02 10:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll
2014-08-23 01:00 - 2013-02-02 09:26 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-08-23 01:00 - 2013-02-02 09:25 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-08-23 01:00 - 2012-11-27 05:55 - 00029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys
2014-08-23 01:00 - 2012-11-20 06:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2014-08-23 01:00 - 2012-11-20 06:54 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys
2014-08-23 01:00 - 2012-09-20 08:32 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2014-08-23 01:00 - 2012-09-20 08:32 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2014-08-23 00:59 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-08-23 00:59 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-08-23 00:59 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-08-23 00:59 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-08-23 00:59 - 2013-12-09 02:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-23 00:59 - 2013-12-09 01:59 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-23 00:59 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2014-08-23 00:59 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2014-08-23 00:59 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2014-08-23 00:59 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2014-08-23 00:59 - 2012-11-26 06:21 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-08-23 00:59 - 2012-11-26 06:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-08-23 00:59 - 2012-11-08 06:24 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2014-08-23 00:59 - 2012-11-08 06:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2014-08-23 00:59 - 2012-11-08 06:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2014-08-23 00:59 - 2012-11-08 06:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2014-08-23 00:59 - 2012-11-08 06:02 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2014-08-23 00:59 - 2012-11-08 06:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2014-08-23 00:58 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2014-08-23 00:57 - 2013-10-02 01:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-08-23 00:57 - 2013-10-02 01:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-08-23 00:57 - 2013-04-27 07:20 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-08-23 00:56 - 2013-02-12 02:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2014-08-23 00:56 - 2013-02-02 07:41 - 01437184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-08-23 00:56 - 2013-02-02 07:31 - 01690624 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-08-23 00:52 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2014-08-23 00:52 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2014-08-23 00:52 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-08-23 00:52 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2014-08-23 00:52 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-08-23 00:52 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-08-23 00:52 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-08-23 00:52 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2014-08-23 00:52 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2014-08-23 00:52 - 2013-03-15 02:17 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-08-23 00:48 - 2012-08-31 02:52 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2014-08-23 00:47 - 2012-08-31 02:53 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2014-08-23 00:40 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2014-08-23 00:40 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-08-23 00:40 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-08-23 00:40 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-08-23 00:38 - 2014-08-07 08:33 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-08-23 00:38 - 2014-08-07 05:09 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-08-23 00:38 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-08-23 00:38 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-08-23 00:38 - 2013-10-10 13:53 - 00096600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-08-23 00:38 - 2013-10-10 11:21 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-23 00:38 - 2013-10-10 11:20 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-23 00:38 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-08-23 00:38 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-08-23 00:38 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-08-23 00:38 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-08-23 00:38 - 2013-01-10 03:53 - 00028904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2014-08-23 00:38 - 2013-01-10 03:29 - 00091880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2014-08-23 00:38 - 2013-01-10 01:26 - 01752064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2014-08-23 00:38 - 2013-01-10 01:26 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2014-08-23 00:38 - 2013-01-10 01:26 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2014-08-23 00:38 - 2013-01-10 01:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-08-23 00:38 - 2013-01-10 01:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe
2014-08-23 00:38 - 2013-01-10 01:23 - 02094592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2014-08-23 00:38 - 2013-01-10 01:23 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
2014-08-23 00:38 - 2013-01-10 01:22 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-08-23 00:38 - 2013-01-10 01:22 - 00666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2014-08-23 00:38 - 2013-01-10 01:22 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2014-08-23 00:38 - 2012-11-02 07:19 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2014-08-23 00:38 - 2012-10-06 06:53 - 02893824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-08-23 00:38 - 2012-10-06 06:15 - 02400256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-08-23 00:36 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-08-23 00:36 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-08-23 00:36 - 2012-10-24 05:25 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2014-08-23 00:36 - 2012-10-24 04:48 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2014-08-23 00:35 - 2014-07-24 14:11 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-23 00:35 - 2014-07-24 14:10 - 02240000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-23 00:35 - 2014-07-24 14:10 - 01407488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-23 00:35 - 2014-07-24 14:10 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-08-23 00:35 - 2014-07-24 14:10 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 19279872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 15399936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 02655232 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-23 00:35 - 2014-07-24 14:09 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-23 00:35 - 2014-07-24 12:52 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-23 00:35 - 2014-07-24 12:52 - 01180672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-23 00:35 - 2014-07-24 12:52 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 14371328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 13757440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 02861568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 02054656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 01440768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-23 00:35 - 2014-07-24 12:51 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-23 00:35 - 2014-07-24 12:33 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-23 00:35 - 2014-07-24 12:29 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-23 00:35 - 2014-07-24 10:03 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-08-23 00:35 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-08-23 00:35 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-08-23 00:34 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-08-23 00:34 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-08-23 00:34 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-08-23 00:34 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2014-08-23 00:34 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2014-08-23 00:34 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-08-23 00:34 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2014-08-23 00:34 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2014-08-23 00:34 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-08-23 00:34 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2014-08-23 00:34 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-08-23 00:34 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2014-08-23 00:34 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2014-08-23 00:34 - 2014-03-11 02:41 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-08-23 00:34 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2014-08-23 00:34 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2014-08-23 00:34 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2014-08-23 00:34 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-08-23 00:34 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2014-08-23 00:34 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-08-23 00:33 - 2013-12-05 01:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-08-23 00:33 - 2013-12-05 01:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-08-23 00:33 - 2013-11-23 08:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-08-23 00:33 - 2013-11-23 07:05 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-08-23 00:31 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-08-23 00:31 - 2013-03-22 05:49 - 02382336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2014-08-23 00:31 - 2013-03-22 00:47 - 02851840 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2014-08-23 00:31 - 2013-03-02 10:23 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-08-23 00:31 - 2013-03-02 04:44 - 01011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-23 00:31 - 2012-12-15 06:55 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-08-23 00:31 - 2012-11-03 07:26 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysreset.exe
2014-08-23 00:31 - 2012-11-03 07:25 - 00945152 _____ (Microsoft Corporation) C:\WINDOWS\system32\resetengmig.dll
2014-08-23 00:25 - 2014-06-20 01:35 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-23 00:25 - 2014-06-20 00:24 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-23 00:11 - 2014-08-23 00:23 - 00000000 ____D () C:\Users\Sacha\Downloads\www.torrent.to...Microsoft.Office.Professional.Plus.2013.x86.x64.VL.19.05.13.TRIBAL
2014-08-23 00:11 - 2014-08-23 00:11 - 00011744 _____ () C:\Users\Sacha\Downloads\MicrosoftOfficeProfessionalPlus2013x86x64VL190513TRIBAL@www.torrent.to.torrent
2014-08-23 00:01 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-22 23:59 - 2014-09-03 11:59 - 00001688 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5_user.job
2014-08-22 23:59 - 2014-09-03 11:59 - 00001668 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5.job
2014-08-22 23:59 - 2014-09-03 11:59 - 00001416 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-2.job
2014-08-22 23:59 - 2014-09-03 11:59 - 00001396 _____ () C:\WINDOWS\Tasks\49d67866-bcb1-4ace-8197-ee18e665e23b.job
2014-08-22 23:59 - 2014-08-23 00:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-22 23:59 - 2014-08-22 23:59 - 00004794 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-1
2014-08-22 23:59 - 2014-08-22 23:59 - 00004672 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5
2014-08-22 23:59 - 2014-08-22 23:59 - 00004420 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-2
2014-08-22 23:59 - 2014-08-22 23:59 - 00004400 _____ () C:\WINDOWS\System32\Tasks\49d67866-bcb1-4ace-8197-ee18e665e23b
2014-08-22 23:58 - 2014-09-03 16:12 - 00004152 _____ () C:\WINDOWS\Tasks\6d220f6a-c569-44f9-9fa1-789a4a59b036.job
2014-08-22 23:58 - 2014-09-03 13:21 - 00000910 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-22 23:58 - 2014-09-03 11:59 - 00001790 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-1.job
2014-08-22 23:58 - 2014-09-03 11:58 - 00004490 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-11.job
2014-08-22 23:58 - 2014-09-03 11:58 - 00002626 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-4.job
2014-08-22 23:58 - 2014-09-03 11:58 - 00000622 _____ () C:\WINDOWS\Tasks\9907d779-26e0-4bcb-b3b5-d00ec154803b.job
2014-08-22 23:58 - 2014-09-02 18:45 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\DVDVideoSoft
2014-08-22 23:58 - 2014-08-23 13:16 - 00003882 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-22 23:58 - 2014-08-23 13:16 - 00003646 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-22 23:58 - 2014-08-23 00:01 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-22 23:58 - 2014-08-22 23:59 - 00007160 _____ () C:\WINDOWS\System32\Tasks\6d220f6a-c569-44f9-9fa1-789a4a59b036
2014-08-22 23:58 - 2014-08-22 23:59 - 00000000 ___RD () C:\Users\Public\Desktop\DVDVideoSoft
2014-08-22 23:58 - 2014-08-22 23:58 - 00007494 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-11
2014-08-22 23:58 - 2014-08-22 23:58 - 00005630 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-4
2014-08-22 23:58 - 2014-08-22 23:58 - 00003618 _____ () C:\WINDOWS\System32\Tasks\9907d779-26e0-4bcb-b3b5-d00ec154803b
2014-08-22 23:57 - 2014-09-03 13:21 - 00000906 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-08-22 23:57 - 2014-09-03 11:58 - 00003808 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-3.job
2014-08-22 23:57 - 2014-08-22 23:59 - 00000000 ____D () C:\Program Files (x86)\CinemaP-1.4
2014-08-22 23:57 - 2014-08-22 23:58 - 00006812 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-3
2014-08-22 23:57 - 2014-08-22 23:57 - 00000000 ____D () C:\Users\Sacha\AppData\Local\globalUpdate
2014-08-22 23:57 - 2014-08-22 23:57 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-22 23:57 - 2014-08-22 23:56 - 00012265 _____ () C:\Users\Sacha\Desktop\batarde.zip
2014-08-22 23:54 - 2014-08-22 23:54 - 00000999 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000981 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Users\Sacha\Documents\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\pdfforge
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-08-22 23:53 - 2014-08-22 23:54 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-22 23:53 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2014-08-22 23:53 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2014-08-22 23:53 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMAPI32.OCX
2014-08-22 23:53 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-08-22 23:53 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPIDE.DLL
2014-08-22 23:53 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6DE.DLL
2014-08-22 23:53 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCDE.DLL
2014-08-22 23:53 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCC2DE.DLL
2014-08-22 23:51 - 2014-08-22 23:51 - 00000999 _____ () C:\Users\Sacha\Desktop\PhotoScape.lnk
2014-08-22 23:51 - 2014-08-22 23:51 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-08-22 23:48 - 2014-08-23 07:50 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-22 23:48 - 2014-08-23 07:25 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-22 23:48 - 2014-08-23 07:25 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-22 23:44 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-08-22 23:44 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-08-22 23:43 - 2014-08-22 23:43 - 02028976 _____ () C:\Users\Sacha\Desktop\winrar-x64-510d.exe
2014-08-22 23:42 - 2014-08-22 23:42 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Winrar.exe
2014-08-22 23:40 - 2014-08-26 09:13 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Winamp
2014-08-22 23:40 - 2014-08-26 09:10 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-08-22 23:40 - 2014-08-22 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-08-22 23:40 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-22 23:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-22 23:36 - 2014-08-23 09:20 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Google
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDStyler
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\Program Files (x86)\DVDStyler
2014-08-22 23:31 - 2014-08-23 02:25 - 00000000 ____D () C:\Windows.old
2014-08-22 23:30 - 2014-08-22 23:30 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-08-22 23:25 - 2014-08-22 23:25 - 00000000 ____D () C:\WINDOWS\pss
2014-08-22 23:18 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
2014-08-22 23:17 - 2013-09-28 05:35 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-08-22 23:17 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2014-08-22 23:17 - 2012-11-10 06:23 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-08-22 23:17 - 2012-11-10 06:23 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-08-22 23:17 - 2012-11-10 06:22 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDWebAI.dll
2014-08-22 23:17 - 2012-11-10 06:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmHostAI.dll
2014-08-22 23:17 - 2012-11-10 06:20 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appserverai.dll
2014-08-22 23:17 - 2012-10-11 09:02 - 01636672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-08-22 23:17 - 2012-10-11 07:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2014-08-22 23:17 - 2012-10-11 07:19 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2014-08-22 23:17 - 2012-10-11 07:18 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2014-08-22 23:15 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-08-22 23:15 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-08-22 23:15 - 2013-11-01 07:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-08-22 23:15 - 2013-11-01 05:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-08-22 23:15 - 2012-11-01 06:41 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-08-22 23:15 - 2012-11-01 06:40 - 02361344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-08-22 23:15 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2014-08-22 23:15 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2014-08-22 23:15 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2014-08-22 23:15 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2014-08-22 23:09 - 2014-08-22 23:09 - 00000797 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-08-22 23:06 - 2014-09-03 10:48 - 00000000 ____D () C:\ProgramData\TorchCrashHandler
2014-08-22 23:06 - 2014-08-23 00:39 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\uTorrent
2014-08-22 23:06 - 2014-08-22 23:30 - 00001428 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch.lnk
2014-08-22 23:06 - 2014-08-22 23:06 - 00002183 _____ () C:\Users\Sacha\Desktop\Facebook.lnk
2014-08-22 23:05 - 2014-08-22 23:07 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Torch
2014-08-22 23:05 - 2014-08-22 23:05 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch
2014-08-22 23:04 - 2014-08-26 00:36 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-08-22 23:04 - 2014-08-23 20:32 - 00001849 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\$WINDOWS.~BT
2014-08-22 22:52 - 2014-08-27 19:34 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2359974274-1062960934-2306791803-1002
2014-08-22 22:49 - 2014-08-22 22:49 - 00000000 ____D () C:\Users\Sacha\AppData\Local\EgisTec IPS
2014-08-22 22:47 - 2014-08-25 11:04 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Atheros
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-08-22 22:44 - 2014-08-23 20:32 - 00001446 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\lm
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Preload
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Accessory Store
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Macromedia
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Adobe
2014-08-22 22:40 - 2014-08-22 22:40 - 00000000 ____D () C:\Users\Sacha\AppData\Local\VirtualStore
2014-08-22 22:39 - 2014-08-27 22:45 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Packages
2014-08-22 22:39 - 2014-08-22 22:39 - 00000020 ___SH () C:\Users\Sacha\ntuser.ini
2014-08-22 22:38 - 2014-09-03 09:12 - 01337438 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-378171.txt
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-375125.txt
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-08-22 22:33 - 2014-08-27 22:29 - 00000000 ____D () C:\Users\UpdatusUser.000
2014-08-22 22:33 - 2014-08-23 16:09 - 00000000 ____D () C:\Users\Sacha
2014-08-22 22:33 - 2014-08-22 22:35 - 00026673 _____ () C:\WINDOWS\diagwrn.xml
2014-08-22 22:33 - 2014-08-22 22:35 - 00026673 _____ () C:\WINDOWS\diagerr.xml
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-90343.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-89187.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-81234.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Anwendungsdaten
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:00 - 2014-08-23 01:44 - 00000000 ___HD () C:\$SysReset
2014-08-22 21:58 - 2014-08-23 16:08 - 00001603 _____ () C:\Users\Sacha\Desktop\The Elder Scrolls Online.lnk
2014-08-22 19:01 - 2014-08-22 21:53 - 00017037 _____ () C:\Users\Sacha\Desktop\Artikelnummern.xlsx
2014-08-22 08:43 - 2014-08-22 18:00 - 00000000 ____D () C:\Games
2014-08-21 20:17 - 2014-08-21 20:17 - 14947660 _____ () C:\Users\Sacha\Desktop\Dudelsack - Bärentanz.mp4
2014-08-19 15:33 - 2014-08-30 19:34 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD & Brennen
2014-08-19 15:27 - 2014-08-19 15:30 - 00000000 ____D () C:\Users\Sacha\Desktop\Spiele
2014-08-19 15:26 - 2014-08-19 15:34 - 00000000 ____D () C:\Users\Sacha\Desktop\Bildbearbeitung
2014-08-18 16:17 - 2009-02-12 18:11 - 00004017 _____ () C:\Users\Sacha\Desktop\_mod_on_off.h
2014-08-18 12:34 - 2014-08-18 12:35 - 00000000 ____D () C:\Users\Sacha\Desktop\NetShow-AOP2_TG
2014-08-14 17:27 - 2014-08-14 17:27 - 00000000 ____D () C:\Users\Sacha\.thumb
2014-08-14 10:10 - 2014-08-14 10:24 - 00000000 ____D () C:\Users\Sacha\Downloads\Nero Burning ROM 2014 15.0.03900+Crack
2014-08-13 21:38 - 2014-09-02 08:14 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD´s
2014-08-13 09:07 - 2014-08-13 09:07 - 00585920 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\BPM Studio PRO.exe
2014-08-13 09:05 - 2014-08-13 09:06 - 11600939 _____ (AlcaTech ) C:\Users\Sacha\Downloads\bpmdemo.exe
2014-08-12 18:46 - 2014-08-12 18:51 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup.exe
2014-08-12 18:46 - 2014-08-12 18:51 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup (1).exe
2014-08-11 19:29 - 2014-08-11 19:29 - 00506140 _____ () C:\Users\Sacha\Downloads\Telcorion.htm
2014-08-11 19:22 - 2014-08-11 19:22 - 00312261 _____ () C:\Users\Sacha\Downloads\photo.htm
2014-08-11 19:03 - 2014-08-11 19:03 - 00294321 _____ () C:\Users\Sacha\Downloads\869314513098447.htm
2014-08-11 10:33 - 2014-08-11 10:33 - 00396756 _____ () C:\Users\Sacha\Downloads\733693106669417-0.htm
2014-08-05 15:45 - 2014-08-27 22:15 - 00097282 _____ () C:\Users\Sacha\Documents\report.txt
2014-08-04 16:39 - 2014-08-04 16:39 - 00000000 ___HD () C:\Users\Sacha\InstallAnywhere

Code:

ATTFilter

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-03 16:36 - 2014-09-02 08:14 - 00000000 ____D () C:\Users\Sacha\Desktop\Got
2014-09-03 16:33 - 2014-09-03 16:32 - 00027700 _____ () C:\Users\Sacha\Desktop\FRST.txt
2014-09-03 16:33 - 2014-09-03 16:32 - 00000000 ____D () C:\FRST
2014-09-03 16:21 - 2014-08-23 07:07 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-03 16:15 - 2014-09-03 16:15 - 02104832 _____ (Farbar) C:\Users\Sacha\Desktop\FRST64.exe
2014-09-03 16:12 - 2014-08-22 23:58 - 00004152 _____ () C:\WINDOWS\Tasks\6d220f6a-c569-44f9-9fa1-789a4a59b036.job
2014-09-03 16:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-03 15:07 - 2014-08-30 10:18 - 00000000 ____D () C:\Users\Sacha\AppData\Local\clear.fi
2014-09-03 13:21 - 2014-08-22 23:58 - 00000910 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-03 13:21 - 2014-08-22 23:57 - 00000906 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-03 11:59 - 2014-08-22 23:59 - 00001688 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5_user.job
2014-09-03 11:59 - 2014-08-22 23:59 - 00001668 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5.job
2014-09-03 11:59 - 2014-08-22 23:59 - 00001416 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-2.job
2014-09-03 11:59 - 2014-08-22 23:59 - 00001396 _____ () C:\WINDOWS\Tasks\49d67866-bcb1-4ace-8197-ee18e665e23b.job
2014-09-03 11:59 - 2014-08-22 23:58 - 00001790 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-1.job
2014-09-03 11:58 - 2014-08-22 23:58 - 00004490 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-11.job
2014-09-03 11:58 - 2014-08-22 23:58 - 00002626 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-4.job
2014-09-03 11:58 - 2014-08-22 23:58 - 00000622 _____ () C:\WINDOWS\Tasks\9907d779-26e0-4bcb-b3b5-d00ec154803b.job
2014-09-03 11:58 - 2014-08-22 23:57 - 00003808 _____ () C:\WINDOWS\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-3.job
2014-09-03 10:48 - 2014-08-22 23:06 - 00000000 ____D () C:\ProgramData\TorchCrashHandler
2014-09-03 09:12 - 2014-08-22 22:38 - 01337438 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-03 08:22 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-09-03 07:54 - 2014-09-03 07:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-09-03 07:54 - 2012-09-03 13:21 - 00001848 _____ () C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk
2014-09-03 07:49 - 2014-08-23 07:06 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-03 07:48 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-03 00:36 - 2014-08-25 11:15 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Awesomium
2014-09-03 00:25 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-02 18:45 - 2014-08-22 23:58 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\DVDVideoSoft
2014-09-02 08:14 - 2014-08-13 21:38 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD´s
2014-09-02 08:00 - 2012-09-03 13:19 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-09-02 07:59 - 2012-09-03 12:56 - 00025368 _____ () C:\WINDOWS\PFRO.log
2014-08-30 20:15 - 2014-08-30 20:10 - 00000000 ____D () C:\Users\Sacha\AppData\Local\paint.net
2014-08-30 20:11 - 2014-08-30 20:11 - 00001304 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00001292 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00000000 ____D () C:\Program Files\paint.net
2014-08-30 20:09 - 2014-08-30 20:09 - 06272852 _____ () C:\Users\Sacha\Downloads\paint.net.4.0.3.install.zip
2014-08-30 19:34 - 2014-08-19 15:33 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD & Brennen
2014-08-30 17:47 - 2013-09-16 14:48 - 00000000 ___RD () C:\Users\Sacha\Google Drive
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\CyberLink
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Software
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Cyberlink
2014-08-30 14:22 - 2012-09-26 11:55 - 00000000 ____D () C:\ProgramData\CyberLink
2014-08-29 22:44 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-08-29 19:19 - 2014-08-25 12:12 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\TS3Client
2014-08-28 06:57 - 2014-08-26 12:33 - 00000000 ____D () C:\Users\Sacha\AppData\Local\CrashDumps
2014-08-28 06:53 - 2012-09-26 21:09 - 00753134 _____ () C:\WINDOWS\system32\perfh007.dat
2014-08-28 06:53 - 2012-09-26 21:09 - 00155826 _____ () C:\WINDOWS\system32\perfc007.dat
2014-08-28 06:53 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-28 06:53 - 2012-07-26 09:28 - 01745416 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-27 22:54 - 2014-08-26 17:45 - 00354392 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-27 22:45 - 2014-08-27 22:39 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-08-27 22:45 - 2014-08-22 22:39 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Packages
2014-08-27 22:45 - 2012-09-03 13:07 - 00000000 ____D () C:\ProgramData\PRICache
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-08-27 22:44 - 2012-09-26 11:23 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-27 22:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-27 22:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-08-27 22:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-08-27 22:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-08-27 22:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-08-27 22:30 - 2014-08-27 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000020 ___SH () C:\Users\UpdatusUser.000\ntuser.ini
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-22 22:33 - 00000000 ____D () C:\Users\UpdatusUser.000
2014-08-27 22:26 - 2012-09-26 11:21 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-27 22:21 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-08-27 22:15 - 2014-08-05 15:45 - 00097282 _____ () C:\Users\Sacha\Documents\report.txt
2014-08-27 19:34 - 2014-08-22 22:52 - 00003600 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2359974274-1062960934-2306791803-1002
2014-08-27 19:32 - 2012-09-03 13:19 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-08-26 21:50 - 2012-07-26 07:26 - 00000301 _____ () C:\WINDOWS\win.ini
2014-08-26 17:49 - 2014-08-26 17:49 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-08-26 17:49 - 2012-07-26 09:21 - 00040786 _____ () C:\WINDOWS\setupact.log
2014-08-26 14:39 - 2014-08-23 14:38 - 00000376 _____ () C:\WINDOWS\Tasks\APSnotifierPP3.job
2014-08-26 09:13 - 2014-08-22 23:40 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Winamp
2014-08-26 09:10 - 2014-08-26 09:10 - 00000947 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-08-26 09:10 - 2014-08-22 23:40 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-08-26 00:36 - 2014-08-22 23:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-08-25 21:29 - 2014-08-25 21:29 - 00001443 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2014-08-25 21:01 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-25 21:00 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-08-25 21:00 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-08-25 20:59 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-08-25 20:59 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-25 20:58 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-25 18:31 - 2014-08-23 06:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-25 18:06 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-25 16:05 - 2014-08-23 07:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-25 12:11 - 2014-08-25 12:11 - 00001130 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-08-25 11:04 - 2014-08-22 22:47 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Atheros
2014-08-24 18:10 - 2014-08-24 18:10 - 00000000 ____D () C:\ProgramData\Elder Scrolls Online
2014-08-24 14:39 - 2014-08-23 14:38 - 00000376 _____ () C:\WINDOWS\Tasks\APSnotifierPP2.job
2014-08-24 08:48 - 2014-08-24 08:48 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-24 08:40 - 2014-08-24 08:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-24 08:25 - 2014-08-24 08:25 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-08-24 08:22 - 2014-08-23 09:20 - 00002273 _____ () C:\Users\Sacha\Desktop\Google Chrome.lnk
2014-08-23 20:32 - 2014-08-22 23:04 - 00001849 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-08-23 20:32 - 2014-08-22 22:44 - 00001446 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-23 20:05 - 2014-08-23 20:05 - 00003092 _____ () C:\WINDOWS\System32\Tasks\{BAF8FCAB-FCC2-4F02-8397-4DD1DEE11862}
2014-08-23 17:38 - 2012-09-03 13:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-08-23 16:09 - 2014-08-23 14:57 - 00000000 ____D () C:\ESO
2014-08-23 16:09 - 2014-08-22 22:33 - 00000000 ____D () C:\Users\Sacha
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\WINDOWS\jre
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2014-08-23 16:08 - 2014-08-23 14:57 - 00000000 ___HD () C:\Program Files (x86)\Zero G Registry
2014-08-23 16:08 - 2014-08-22 21:58 - 00001603 _____ () C:\Users\Sacha\Desktop\The Elder Scrolls Online.lnk
2014-08-23 15:01 - 2014-08-23 14:38 - 00000378 _____ () C:\WINDOWS\Tasks\APSnotifierPP1.job
2014-08-23 14:39 - 2014-08-23 14:38 - 00002808 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP1
2014-08-23 14:39 - 2014-08-23 14:38 - 00002806 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP3
2014-08-23 14:39 - 2014-08-23 14:38 - 00002806 _____ () C:\WINDOWS\System32\Tasks\APSnotifierPP2
2014-08-23 14:38 - 2014-08-23 14:38 - 00000000 _____ () C:\Users\Sacha\AppData\Roaming\aps.uninstall.scan.results
2014-08-23 14:34 - 2014-08-23 14:34 - 00631560 _____ (ClickMeIn Limited) C:\Users\Sacha\AppData\Local\nsp2507.tmp
2014-08-23 13:24 - 2014-08-23 13:24 - 00004022 _____ () C:\WINDOWS\System32\Tasks\LaunchSignup
2014-08-23 13:23 - 2014-08-23 13:23 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-08-23 13:23 - 2014-08-23 13:23 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-08-23 13:23 - 2014-08-23 13:23 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-08-23 13:22 - 2014-08-23 09:29 - 00000000 ____D () C:\Program Files\005
2014-08-23 13:21 - 2014-08-23 13:14 - 00000000 ____D () C:\Program Files (x86)\hdvidcodec.com
2014-08-23 13:16 - 2014-08-22 23:58 - 00003882 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-23 13:16 - 2014-08-22 23:58 - 00003646 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-23 13:14 - 2014-08-23 13:14 - 00000846 _____ () C:\Users\Public\Desktop\HDVidCodec.lnk
2014-08-23 13:14 - 2014-08-23 13:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\hdvidcodec.com
2014-08-23 13:13 - 2014-08-23 13:13 - 00411336 _____ () C:\Users\Sacha\Downloads\HDvid-codec-Chrome.exe
2014-08-23 13:12 - 2014-08-23 13:12 - 00448856 _____ () C:\Users\Sacha\Downloads\atdhd_download.exe
2014-08-23 09:47 - 2014-08-23 09:47 - 00001131 _____ () C:\WINDOWS\system32\netcfg-1893828.txt
2014-08-23 09:46 - 2014-08-23 09:46 - 00000000 ____D () C:\Users\Sacha\AppData\Local\BMExplorer
2014-08-23 09:46 - 2012-09-26 11:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-08-23 09:39 - 2014-08-23 09:39 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-08-23 09:36 - 2014-08-23 09:36 - 00001829 _____ () C:\Users\Sacha\Desktop\Microsoft Office 2013 - Verknüpfung.lnk
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Deployment
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Apps\2.0
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Oracle
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\.snippingtool++
2014-08-23 09:33 - 2014-08-23 09:33 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Sun
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-23 09:31 - 2014-08-23 09:31 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\WinRAR
2014-08-23 09:28 - 2014-08-23 09:28 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Snipping Tool++.exe
2014-08-23 09:20 - 2014-08-22 23:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Google
2014-08-23 09:15 - 2012-07-26 07:37 - 00000000 ____D () C:\WINDOWS\servicing
2014-08-23 08:56 - 2014-08-23 08:56 - 00000136 _____ () C:\WINDOWS\system32\netcfg-130468.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130250.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-128890.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000128 _____ () C:\WINDOWS\system32\netcfg-143203.txt
2014-08-23 08:47 - 2014-08-27 22:52 - 04036096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-23 08:37 - 2014-08-23 08:37 - 00000136 _____ () C:\WINDOWS\system32\netcfg-293671.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293453.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293171.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000128 _____ () C:\WINDOWS\system32\netcfg-307750.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000136 _____ () C:\WINDOWS\system32\netcfg-245156.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-244812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-242812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000128 _____ () C:\WINDOWS\system32\netcfg-268281.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151921.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151859.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-141937.txt
2014-08-23 07:50 - 2014-08-22 23:48 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-23 07:31 - 2013-08-22 18:42 - 00000000 ____D () C:\Users\Sacha\Desktop\diverse Converter
2014-08-23 07:30 - 2014-08-23 07:26 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit
2014-08-23 07:25 - 2014-08-22 23:48 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-23 07:25 - 2014-08-22 23:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-23 07:16 - 2014-08-23 07:07 - 00004094 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-23 07:16 - 2014-08-23 07:07 - 00003858 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-23 07:08 - 2014-08-23 07:06 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-23 07:07 - 2014-08-23 07:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-23 07:04 - 2014-08-23 07:04 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-08-23 07:03 - 2014-08-23 07:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-08-23 07:03 - 2014-08-23 07:02 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-08-23 07:02 - 2014-08-23 07:02 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-08-23 07:02 - 2014-08-23 06:56 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-23 07:02 - 2012-09-26 11:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-08-23 06:57 - 2012-07-26 09:52 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-08-23 06:56 - 2014-08-23 06:56 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Microsoft Help
2014-08-23 03:58 - 2014-08-23 03:56 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-23 02:25 - 2014-08-22 23:31 - 00000000 ____D () C:\Windows.old
2014-08-23 01:44 - 2014-08-22 22:00 - 00000000 ___HD () C:\$SysReset
2014-08-23 00:39 - 2014-08-22 23:06 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\uTorrent
2014-08-23 00:23 - 2014-08-23 00:11 - 00000000 ____D () C:\Users\Sacha\Downloads\www.torrent.to...Microsoft.Office.Professional.Plus.2013.x86.x64.VL.19.05.13.TRIBAL
2014-08-23 00:11 - 2014-08-23 00:11 - 00011744 _____ () C:\Users\Sacha\Downloads\MicrosoftOfficeProfessionalPlus2013x86x64VL190513TRIBAL@www.torrent.to.torrent
2014-08-23 00:01 - 2014-08-22 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-23 00:01 - 2014-08-22 23:58 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-22 23:59 - 2014-08-22 23:59 - 00004794 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-1
2014-08-22 23:59 - 2014-08-22 23:59 - 00004672 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-5
2014-08-22 23:59 - 2014-08-22 23:59 - 00004420 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-2
2014-08-22 23:59 - 2014-08-22 23:59 - 00004400 _____ () C:\WINDOWS\System32\Tasks\49d67866-bcb1-4ace-8197-ee18e665e23b
2014-08-22 23:59 - 2014-08-22 23:58 - 00007160 _____ () C:\WINDOWS\System32\Tasks\6d220f6a-c569-44f9-9fa1-789a4a59b036
2014-08-22 23:59 - 2014-08-22 23:58 - 00000000 ___RD () C:\Users\Public\Desktop\DVDVideoSoft
2014-08-22 23:59 - 2014-08-22 23:57 - 00000000 ____D () C:\Program Files (x86)\CinemaP-1.4
2014-08-22 23:58 - 2014-08-22 23:58 - 00007494 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-11
2014-08-22 23:58 - 2014-08-22 23:58 - 00005630 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-4
2014-08-22 23:58 - 2014-08-22 23:58 - 00003618 _____ () C:\WINDOWS\System32\Tasks\9907d779-26e0-4bcb-b3b5-d00ec154803b
2014-08-22 23:58 - 2014-08-22 23:57 - 00006812 _____ () C:\WINDOWS\System32\Tasks\b19169a4-fca4-42fc-9e6d-779138f20658-3
2014-08-22 23:57 - 2014-08-22 23:57 - 00000000 ____D () C:\Users\Sacha\AppData\Local\globalUpdate
2014-08-22 23:57 - 2014-08-22 23:57 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-22 23:56 - 2014-08-22 23:57 - 00012265 _____ () C:\Users\Sacha\Desktop\batarde.zip
2014-08-22 23:54 - 2014-08-22 23:54 - 00000999 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000981 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Users\Sacha\Documents\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\pdfforge
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:53 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-22 23:51 - 2014-08-22 23:51 - 00000999 _____ () C:\Users\Sacha\Desktop\PhotoScape.lnk
2014-08-22 23:51 - 2014-08-22 23:51 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-08-22 23:45 - 2012-09-03 13:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-22 23:45 - 2012-09-03 13:14 - 00000000 ____D () C:\ProgramData\WildTangent
2014-08-22 23:43 - 2014-08-22 23:43 - 02028976 _____ () C:\Users\Sacha\Desktop\winrar-x64-510d.exe
2014-08-22 23:42 - 2014-08-22 23:42 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Winrar.exe
2014-08-22 23:40 - 2014-08-22 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-08-22 23:40 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDStyler
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\Program Files (x86)\DVDStyler
2014-08-22 23:31 - 2012-07-26 10:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-08-22 23:30 - 2014-08-22 23:30 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-08-22 23:30 - 2014-08-22 23:06 - 00001428 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch.lnk
2014-08-22 23:25 - 2014-08-22 23:25 - 00000000 ____D () C:\WINDOWS\pss
2014-08-22 23:16 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-08-22 23:09 - 2014-08-22 23:09 - 00000797 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-08-22 23:07 - 2014-08-22 23:05 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Torch
2014-08-22 23:06 - 2014-08-22 23:06 - 00002183 _____ () C:\Users\Sacha\Desktop\Facebook.lnk
2014-08-22 23:05 - 2014-08-22 23:05 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\$WINDOWS.~BT
2014-08-22 23:00 - 2014-07-09 19:07 - 00000000 ____D () C:\download
2014-08-22 22:49 - 2014-08-22 22:49 - 00000000 ____D () C:\Users\Sacha\AppData\Local\EgisTec IPS
2014-08-22 22:49 - 2012-09-03 13:23 - 00000000 ____D () C:\ProgramData\EgisTec IPS
2014-08-22 22:48 - 2014-05-03 19:06 - 00001379 _____ () C:\Users\Sacha\Desktop\Telegram.lnk
2014-08-22 22:46 - 2012-09-03 13:49 - 00000000 ___HD () C:\OEM
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\lm
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Preload
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Accessory Store
2014-08-22 22:44 - 2012-09-26 11:48 - 00000000 ____D () C:\ProgramData\OEM
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Macromedia
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Adobe
2014-08-22 22:40 - 2014-08-22 22:40 - 00000000 ____D () C:\Users\Sacha\AppData\Local\VirtualStore
2014-08-22 22:39 - 2014-08-22 22:39 - 00000020 ___SH () C:\Users\Sacha\ntuser.ini
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-378171.txt
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-375125.txt
2014-08-22 22:38 - 2012-09-03 13:56 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-08-22 22:36 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows NT
2014-08-22 22:36 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default
2014-08-22 22:35 - 2014-08-22 22:33 - 00026673 _____ () C:\WINDOWS\diagwrn.xml
2014-08-22 22:35 - 2014-08-22 22:33 - 00026673 _____ () C:\WINDOWS\diagerr.xml
2014-08-22 22:35 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-08-22 22:35 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-90343.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-89187.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-81234.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Anwendungsdaten
2014-08-22 21:53 - 2014-08-22 19:01 - 00017037 _____ () C:\Users\Sacha\Desktop\Artikelnummern.xlsx
2014-08-22 18:19 - 2013-12-01 16:13 - 00000000 __RDO () C:\Users\Sacha\SkyDrive
2014-08-22 18:00 - 2014-08-22 08:43 - 00000000 ____D () C:\Games
2014-08-21 23:12 - 2013-01-05 00:23 - 03952640 ___SH () C:\Users\Sacha\Desktop\Thumbs.db
2014-08-21 20:17 - 2014-08-21 20:17 - 14947660 _____ () C:\Users\Sacha\Desktop\Dudelsack - Bärentanz.mp4
2014-08-21 07:30 - 2014-08-23 01:05 - 00061008 _____ (StdLib) C:\WINDOWS\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
2014-08-19 15:34 - 2014-08-19 15:26 - 00000000 ____D () C:\Users\Sacha\Desktop\Bildbearbeitung
2014-08-19 15:34 - 2014-06-14 07:56 - 00000000 ____D () C:\Users\Sacha\Documents\Appelmann
2014-08-19 15:30 - 2014-08-19 15:27 - 00000000 ____D () C:\Users\Sacha\Desktop\Spiele
2014-08-18 21:49 - 2013-06-03 23:47 - 01212928 ___SH () C:\Users\Sacha\Downloads\Thumbs.db
2014-08-18 12:35 - 2014-08-18 12:34 - 00000000 ____D () C:\Users\Sacha\Desktop\NetShow-AOP2_TG
2014-08-14 17:27 - 2014-08-14 17:27 - 00000000 ____D () C:\Users\Sacha\.thumb
2014-08-14 10:24 - 2014-08-14 10:10 - 00000000 ____D () C:\Users\Sacha\Downloads\Nero Burning ROM 2014 15.0.03900+Crack
2014-08-13 09:07 - 2014-08-13 09:07 - 00585920 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\BPM Studio PRO.exe
2014-08-13 09:06 - 2014-08-13 09:05 - 11600939 _____ (AlcaTech ) C:\Users\Sacha\Downloads\bpmdemo.exe
2014-08-12 18:51 - 2014-08-12 18:46 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup.exe
2014-08-12 18:51 - 2014-08-12 18:46 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup (1).exe
2014-08-11 19:29 - 2014-08-11 19:29 - 00506140 _____ () C:\Users\Sacha\Downloads\Telcorion.htm
2014-08-11 19:22 - 2014-08-11 19:22 - 00312261 _____ () C:\Users\Sacha\Downloads\photo.htm
2014-08-11 19:03 - 2014-08-11 19:03 - 00294321 _____ () C:\Users\Sacha\Downloads\869314513098447.htm
2014-08-11 10:33 - 2014-08-11 10:33 - 00396756 _____ () C:\Users\Sacha\Downloads\733693106669417-0.htm
2014-08-07 08:33 - 2014-08-23 00:38 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-08-07 05:09 - 2014-08-23 00:38 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-08-04 16:39 - 2014-08-04 16:39 - 00000000 ___HD () C:\Users\Sacha\InstallAnywhere

Some content of TEMP:
====================
C:\Users\Sacha\AppData\Local\Temp\BackupSetup.exe
C:\Users\Sacha\AppData\Local\Temp\COMAP.EXE
C:\Users\Sacha\AppData\Local\Temp\JIntellitype.dll
C:\Users\Sacha\AppData\Local\Temp\nsqF298.tmp.exe
C:\Users\Sacha\AppData\Local\Temp\nswBCBE.tmp.exe
C:\Users\Sacha\AppData\Local\Temp\ose00000.exe
C:\Users\Sacha\AppData\Local\Temp\PidGenX.dll
C:\Users\Sacha\AppData\Local\Temp\PodoWebSetup.exe
C:\Users\Sacha\AppData\Local\Temp\setup.exe
C:\Users\Sacha\AppData\Local\Temp\utt9F76.tmp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-02 08:55

==================== End Of Log ============================

cosinus · 03.09.2014, 20:22

Zitat:

C:\Users\Sacha\Downloads\Nero Burning ROM 2014 15.0.03900+Crack

Bitte lesen => http://www.trojaner-board.de/95393-c...-software.html

Es geht weiter wenn du alles Illegale entfernt hast.

Bei wiederholten Crack/Keygen Verstößen behalte ich es mir vor, den Support einzustellen, d.h. Hilfe nur noch bei der Datensicherung und Neuinstallation des Betriebssystems.

Telcorion · 04.09.2014, 21:03

Hallo,
wie du vielleicht sehen kannst, ist Nero bei mir gar nicht installiert. Ich hatte es mal versucht runterzuladen als ich ein Brennprogramm für meine Fotos suchte. Es aber letztendlich nicht runtergeladen und nicht installiert. Der Ordner war auch leer als ich ihn vorhin öffnete.

Grüße

cosinus · 04.09.2014, 23:35

Joa, das ist aber ein eindringlicher Hinweis, dass wir hier keine Cracks/Keygens tolerieren, also sieht bitte sieh zu, dass der Schund runter ist. Danke.

Telcorion · 05.09.2014, 07:17

Habe es runter geworfen

cosinus · 05.09.2014, 08:18

Adware/Junkware/Toolbars entfernen

(alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen aus den Desktop!)

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

3. Schritt: Frisches Log mit FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:

FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

Telcorion · 07.09.2014, 06:51

Code:

ATTFilter

# AdwCleaner v3.309 - Bericht erstellt am 07/09/2014 um 07:25:08
# Aktualisiert 02/09/2014 von Xplode
# Betriebssystem : Windows 8  (64 bits)
# Benutzername : Sacha - EAMBAR
# Gestartet von : C:\Users\Sacha\Desktop\adwcleaner_3.309.exe
# Option : Löschen

***** [ Dienste ] *****

[#] Dienst Gelöscht : globalUpdate
[#] Dienst Gelöscht : globalUpdatem
Dienst Gelöscht : IePluginServices
Dienst Gelöscht : torchcrashhandler
Dienst Gelöscht : hzunyanhtn64
Dienst Gelöscht : vulsrsebjh64
Dienst Gelöscht : {00c97d86-accb-4288-9972-6d929c1fe93a}Gw64

***** [ Dateien / Ordner ] *****

Ordner Gelöscht : C:\ProgramData\IePluginServices
Ordner Gelöscht : C:\ProgramData\torchcrashhandler
Ordner Gelöscht : C:\ProgramData\WindowsMangerProtect
Ordner Gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDvidCodec.com
Ordner Gelöscht : C:\Program Files (x86)\globalUpdate
Ordner Gelöscht : C:\Program Files (x86)\HDvidCodec.com
Ordner Gelöscht : C:\Program Files (x86)\SupTab
Ordner Gelöscht : C:\Program Files (x86)\CinemaP-1.4
[/!\] Nicht Gelöscht ( Junction ) : C:\Program Files\Gemeinsame Dateien
Ordner Gelöscht : C:\Program Files\005
Ordner Gelöscht : C:\Users\Sacha\Qtrax
Ordner Gelöscht : C:\Users\Sacha\AppData\Local\globalUpdate
Ordner Gelöscht : C:\Users\Sacha\AppData\Local\torch
Ordner Gelöscht : C:\Users\Sacha\AppData\Local\Temp\PodoWeb
Ordner Gelöscht : C:\Users\Sacha\AppData\LocalLow\Conduit
Ordner Gelöscht : C:\Users\Sacha\AppData\LocalLow\PriceGong
Ordner Gelöscht : C:\Users\Sacha\AppData\LocalLow\Smartbar
Ordner Gelöscht : C:\Users\Sacha\AppData\Roaming\pdfforge
Ordner Gelöscht : C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\torch
Ordner Gelöscht : C:\Users\Sacha\Documents\PC Speed Maximizer
Ordner Gelöscht : C:\Users\Sacha\Documents\Updater
Ordner Gelöscht : C:\Users\Sacha\AppData\Local\Software
Ordner Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb
Ordner Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma
Datei Gelöscht : C:\END
Datei Gelöscht : C:\Users\Public\Desktop\HDVidCodec.lnk
Datei Gelöscht : C:\WINDOWS\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}Gw64.sys
Datei Gelöscht : C:\Users\Sacha\AppData\Roaming\aps.uninstall.scan.results
Datei Gelöscht : C:\Users\Sacha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Torch.lnk
Datei Gelöscht : C:\Users\Sacha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Torch.lnk
Datei Gelöscht : C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Torch.lnk
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_istart.webssearches.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.livelyrics00.live-lyrics.com_0.localstorage
Datei Gelöscht : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_static.livelyrics00.live-lyrics.com_0.localstorage-journal

***** [ Tasks ] *****

Task Gelöscht : APSnotifierPP1
Task Gelöscht : APSnotifierPP2
Task Gelöscht : APSnotifierPP3
Task Gelöscht : globalUpdateUpdateTaskMachineCore
Task Gelöscht : globalUpdateUpdateTaskMachineUA
Task Gelöscht : LaunchSignup
Task Gelöscht : 49d67866-bcb1-4ace-8197-ee18e665e23b
Task Gelöscht : 6d220f6a-c569-44f9-9fa1-789a4a59b036
Task Gelöscht : 9907d779-26e0-4bcb-b3b5-d00ec154803b
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-1
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-11
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-2
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-3
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-4
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-5
Task Gelöscht : b19169a4-fca4-42fc-9e6d-779138f20658-5_user

***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Schlüssel Gelöscht : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Applications\Torch.exe
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Schlüssel Gelöscht : HKLM\SOFTWARE\MozillaPlugins\TorchVLC
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\IePluginServices
Schlüssel Gelöscht : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061762.BHO
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061762.BHO.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061762.Sandbox
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CrossriderApp0061762.Sandbox.1
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{C007DADD-132A-624C-088E-59EE6CF0711F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611171162}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172262}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175562}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176662}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440644174462}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171162}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611171162}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110611171162}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220622172262}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550655175562}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660666176662}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611171162}
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Daten Wiederhergestellt : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Schlüssel Gelöscht : HKCU\Software\1ClickDownload
Schlüssel Gelöscht : HKCU\Software\AnyProtect
Schlüssel Gelöscht : HKCU\Software\GlobalUpdate
Schlüssel Gelöscht : HKCU\Software\InstalledBrowserExtensions
Schlüssel Gelöscht : HKCU\Software\OCS
Schlüssel Gelöscht : HKCU\Software\SupHpUISoft
Schlüssel Gelöscht : HKCU\Software\torch
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Crossrider
Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\CinemaP-1.4
Schlüssel Gelöscht : HKLM\SOFTWARE\GlobalUpdate
Schlüssel Gelöscht : HKLM\SOFTWARE\InstalledBrowserExtensions
Schlüssel Gelöscht : HKLM\SOFTWARE\SupDp
Schlüssel Gelöscht : HKLM\SOFTWARE\SupTab
Schlüssel Gelöscht : HKLM\SOFTWARE\supWindowsMangerProtect
Schlüssel Gelöscht : HKLM\SOFTWARE\supWPM
Schlüssel Gelöscht : HKLM\SOFTWARE\torch
Schlüssel Gelöscht : HKLM\SOFTWARE\webssearchesSoftware
Schlüssel Gelöscht : HKLM\SOFTWARE\CinemaP-1.4
Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\torch
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.4
Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions

***** [ Browser ] *****

-\\ Internet Explorer v10.0.9200.17054

Einstellung Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Einstellung Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v37.0.2062.103

[ Datei : C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Gelöscht [Startup_urls] : hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
Gelöscht [Homepage] : hxxp://istart.webssearches.com/?type=hp&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T
Gelöscht [Extension] : mnanplinmmnjhobaliikmelmmjpoogkb
Gelöscht [Extension] : pelmeidfhdlhlbjimpabfcbnnojbboma

*************************

AdwCleaner[R0].txt - [18041 octets] - [07/09/2014 07:23:34]
AdwCleaner[S0].txt - [16306 octets] - [07/09/2014 07:25:08]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16367 octets] ##########

Code:

ATTFilter

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.4 (04.06.2014:1)
OS: Windows 8 x64
Ran by Sacha on 07.09.2014 at  7:40:23,23
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}



~~~ Files

Successfully deleted: [File] "C:\Users\Sacha\appdata\locallow\microsoft\silverlight\outofbrowser\index\portal.qtrax.com"



~~~ Folders



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 07.09.2014 at  7:45:19,10
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Code:

ATTFilter

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 01
Ran by Sacha (administrator) on EAMBAR on 07-09-2014 07:47:17
Running from C:\Users\Sacha\Desktop
Platform: Windows 8 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 10
Boot Mode: Normal


==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\mcsvchost\McSvHost.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Atheros) C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe
(McAfee, Inc.) C:\Program Files\mcafee\msc\McAPExe.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16.4.4206.722_x64__8wekyb3d8bbwe\LiveComm.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(NTI Corporation) C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\Platform\McUICnt.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Opera Software) C:\Program Files (x86)\Opera\opera.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
() C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\PmmUpdate.exe
(Egis Technology Inc.) C:\Program Files\EgisTec IPS\EgisUpdate.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1212048 2012-06-07] (Realtek Semiconductor)
HKLM\...\Run: [BtPreLoad] => C:\Program Files (x86)\Bluetooth Suite\BtPreLoad.exe [64640 2012-08-10] ()
HKLM-x32\...\Run: [mcui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [508256 2012-04-23] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [mcpltui_exe] => C:\Program Files\McAfee.com\Agent\mcagent.exe [537992 2014-04-25] (McAfee, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer: [NoFolderOptions] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\.DEFAULT\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-19\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-20\...\RunOnce: [IsMyWinLockerReboot] => msiexec.exe /qn /x{voidguid}
HKU\S-1-5-21-2359974274-1062960934-2306791803-1009\...\RunOnce: [RegAutoPlay] => C:\Program Files (x86)\Acer\clear.fi Media\RegAutoplay.exe [1845392 2012-08-21] (Acer Incorporated)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [168616 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
AppInit_DLLs-x32: ,C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [141336 2013-09-05] (NVIDIA Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer Backup Manager Tray.lnk
ShortcutTarget: Acer Backup Manager Tray.lnk -> C:\Program Files (x86)\NTI\Acer Backup Manager\BackupManagerTray.exe (NTI Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKLM-x32 - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = hxxp://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MAARJS
SearchScopes: HKCU - {BBF03D93-4A5B-4B2E-8A55-E0DCC6FA1CC4} URL = 
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: McAfee SiteAdvisor BHO -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Toolbar: HKLM-x32 - McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll (McAfee, Inc.)
Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\msc\McSnIePl.dll (McAfee, Inc.)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_179.dll ()
FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_179.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: PDF Architect 2 -> C:\Program Files (x86)\PDF Architect 2\np-previewer.dll (pdfforge GmbH)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor
FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2012-09-03]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: McAfee Anti-Spam Thunderbird Extension - C:\Program Files\McAfee\MSK [2012-09-03]

Chrome: 
=======
CHR HomePage: Default -> 52FAFDFAA89C1EA0790E84EFCE526C3E179EFAD94DEABF87FCDD226D5632C4E9
CHR NewTab: Default -> "chrome-extension://pelmeidfhdlhlbjimpabfcbnnojbboma/index.html"
CHR DefaultSearchKeyword: Default -> webssearches
CHR DefaultSearchURL: Default -> hxxp://istart.webssearches.com/web/?type=ds&ts=1408792962&from=ild&uid=TOSHIBAXMQ01ABD075_92F6P0J2TXX92F6P0J2T&q={searchTerms}
CHR DefaultSuggestURL: Default -> 
CHR Profile: C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-23]
CHR Extension: (Google Drive) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-23]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-06]
CHR Extension: (YouTube) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-23]
CHR Extension: (Google-Suche) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-23]
CHR Extension: (SiteAdvisor) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2014-08-23]
CHR Extension: (No Name) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnanplinmmnjhobaliikmelmmjpoogkb [2014-08-23]
CHR Extension: (Google Wallet) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-23]
CHR Extension: (No Name) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-08-23]
CHR Extension: (Google Mail) - C:\Users\Sacha\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-23]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [211584 2012-08-10] (Qualcomm Atheros Commnucations)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-20] (Broadcom Corp.) [File not signed]
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2435728 2012-08-23] (Acer Incorporated)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [468624 2012-08-23] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [658576 2012-08-22] (Acer Incorporated)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
R2 McAfee SiteAdvisor Service; C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [178528 2014-04-25] (McAfee, Inc.)
S3 McAWFwk; c:\Program Files\mcafee\msc\McAWFwk.exe [332080 2012-01-26] (McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [603424 2014-06-12] (McAfee, Inc.)
S2 McOobeSv; C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe [200728 2012-05-11] (McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\mcafee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1041192 2014-07-24] (McAfee, Inc.)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219752 2014-06-20] (McAfee, Inc.)
R2 mfevtp; C:\windows\system32\mfevtps.exe [189912 2014-06-20] (McAfee, Inc.)
R2 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [328928 2013-07-30] (McAfee, Inc.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NTI\Acer Backup Manager\IScheduleSvc.exe [259136 2012-08-23] (NTI Corporation)
S3 PDF Architect 2; C:\Program Files (x86)\PDF Architect 2\ws.exe [1771560 2014-06-26] (pdfforge GmbH)
S3 pdfforge CrashHandler; C:\Program Files (x86)\PDF Architect 2\crash-handler-ws.exe [861736 2014-06-26] (pdfforge GmbH)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [93296 2012-09-26] (Dritek System INC.)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Qualcomm Atheros\Ath_WlanAgent.exe [81536 2012-08-01] (Atheros)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [76952 2012-08-10] (Qualcomm Atheros)
R3 BthA2DP; C:\Windows\system32\drivers\BthA2DP.sys [117632 2013-06-01] (Microsoft Corporation)
R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72128 2014-06-20] (McAfee, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.)
R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181704 2014-06-20] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313544 2014-06-20] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [70600 2014-06-20] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [523792 2014-06-20] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786296 2014-06-20] (McAfee, Inc.)
R3 mfencbdc; C:\Windows\system32\DRIVERS\mfencbdc.sys [444720 2014-07-24] (McAfee, Inc.)
S3 mfencrk; C:\Windows\system32\DRIVERS\mfencrk.sys [96592 2014-07-24] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348552 2014-06-20] (McAfee, Inc.)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2012-09-26] (Dritek System Inc.)

Code:

ATTFilter

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 07:45 - 2014-09-07 07:45 - 00000839 _____ () C:\Users\Sacha\Desktop\JRT.txt
2014-09-07 07:40 - 2014-09-07 07:40 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-09-07 07:35 - 2014-09-07 07:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-09-07 07:34 - 2014-09-07 07:34 - 01016261 _____ (Thisisu) C:\Users\Sacha\Desktop\JRT.exe
2014-09-07 07:29 - 2014-09-07 07:29 - 00354392 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-09-07 07:24 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-07 07:23 - 2014-09-07 07:27 - 00000000 ____D () C:\AdwCleaner
2014-09-07 00:27 - 2014-07-12 06:41 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRUM.DLL
2014-09-07 00:27 - 2014-07-12 06:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYAK.DLL
2014-09-07 00:27 - 2014-07-12 06:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAT.DLL
2014-09-07 00:27 - 2014-07-12 06:41 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU1.DLL
2014-09-07 00:27 - 2014-07-12 06:41 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU.DLL
2014-09-07 00:27 - 2014-07-12 06:41 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBASH.DLL
2014-09-07 00:27 - 2014-07-12 06:16 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRUM.DLL
2014-09-07 00:27 - 2014-07-12 06:16 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYAK.DLL
2014-09-07 00:27 - 2014-07-12 06:16 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAT.DLL
2014-09-07 00:27 - 2014-07-12 06:16 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU1.DLL
2014-09-07 00:27 - 2014-07-12 06:16 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU.DLL
2014-09-07 00:27 - 2014-07-12 06:15 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBASH.DLL
2014-09-07 00:27 - 2014-07-12 02:02 - 00478352 _____ () C:\WINDOWS\SysWOW64\locale.nls
2014-09-07 00:27 - 2014-07-12 02:00 - 00478352 _____ () C:\WINDOWS\system32\locale.nls
2014-09-07 00:27 - 2014-07-09 00:33 - 00181248 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2014-09-07 00:27 - 2014-07-09 00:32 - 01539584 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-09-07 00:27 - 2014-07-09 00:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-09-07 00:27 - 2014-07-09 00:30 - 01220608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2014-09-07 00:27 - 2014-07-07 07:52 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2014-09-07 00:27 - 2014-07-07 07:52 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-09-07 00:27 - 2014-07-04 12:52 - 00328000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-09-07 00:27 - 2014-07-03 03:59 - 01824784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-09-07 00:27 - 2014-07-03 02:30 - 01408952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-09-07 00:27 - 2014-06-28 09:01 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-09-07 00:27 - 2014-06-28 08:57 - 00209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-09-07 00:27 - 2014-06-28 08:56 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-09-07 00:27 - 2014-06-28 01:09 - 00387391 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-09-07 00:27 - 2014-06-27 05:42 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-09-07 00:27 - 2014-06-27 05:41 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-09-07 00:27 - 2014-06-25 09:09 - 00733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-09-07 00:27 - 2014-06-25 09:07 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-09-07 00:27 - 2014-06-18 01:27 - 02032640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-09-07 00:27 - 2014-06-18 01:23 - 02238464 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-09-07 00:27 - 2014-06-11 16:47 - 02842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-09-07 00:27 - 2014-06-11 06:40 - 02620928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2014-09-07 00:27 - 2014-06-11 00:44 - 01403896 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-09-07 00:27 - 2014-05-30 01:31 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-09-07 00:27 - 2014-05-30 01:03 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-09-07 00:27 - 2014-02-04 12:57 - 01271664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-09-07 00:26 - 2014-08-21 01:40 - 00732880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2014-09-07 00:26 - 2014-08-20 19:05 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-09-07 00:26 - 2014-08-20 19:05 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-09-07 00:26 - 2014-08-20 19:05 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-07 00:26 - 2014-08-20 19:02 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-09-07 00:26 - 2014-08-20 19:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-07 00:26 - 2014-06-24 09:35 - 00010450 _____ () C:\WINDOWS\system32\autoconfig.cab
2014-09-07 00:26 - 2014-06-24 08:41 - 10115584 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-09-07 00:26 - 2014-06-24 08:40 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2014-09-07 00:26 - 2014-06-24 08:39 - 02307072 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-09-07 00:26 - 2014-06-24 08:39 - 02146304 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-09-07 00:26 - 2014-06-24 06:08 - 08858624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-09-07 00:26 - 2014-06-24 06:06 - 02037760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-09-07 00:26 - 2014-06-24 06:06 - 00754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-09-05 19:32 - 2014-09-05 19:32 - 01370483 _____ () C:\Users\Sacha\Desktop\adwcleaner_3.309.exe
2014-09-03 16:42 - 2014-09-03 16:45 - 00050571 _____ () C:\Users\Sacha\Desktop\Addition.txt
2014-09-03 16:32 - 2014-09-07 07:47 - 00020047 _____ () C:\Users\Sacha\Desktop\FRST.txt
2014-09-03 16:32 - 2014-09-07 07:47 - 00000000 ____D () C:\FRST
2014-09-03 16:15 - 2014-09-03 16:15 - 02104832 _____ (Farbar) C:\Users\Sacha\Desktop\FRST64.exe
2014-09-02 08:14 - 2014-09-04 14:38 - 00000000 ____D () C:\Users\Sacha\Desktop\Got
2014-08-30 20:11 - 2014-08-30 20:11 - 00001304 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00001292 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00000000 ____D () C:\Program Files\paint.net
2014-08-30 20:10 - 2014-08-30 20:15 - 00000000 ____D () C:\Users\Sacha\AppData\Local\paint.net
2014-08-30 20:09 - 2014-08-30 20:09 - 06272852 _____ () C:\Users\Sacha\Downloads\paint.net.4.0.3.install.zip
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\CyberLink
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Cyberlink
2014-08-30 10:18 - 2014-09-03 15:07 - 00000000 ____D () C:\Users\Sacha\AppData\Local\clear.fi
2014-08-28 07:48 - 2012-08-30 13:37 - 02213776 _____ (ELAN Microelectronics Corp.) C:\WINDOWS\ETDUninst.dll
2014-08-27 22:52 - 2014-08-23 08:47 - 04036096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:52 - 2014-07-16 01:03 - 01300992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-27 22:52 - 2014-07-12 04:36 - 01023488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-08-27 22:39 - 2014-08-27 22:45 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-08-27 22:30 - 2014-08-27 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000020 ___SH () C:\Users\UpdatusUser.000\ntuser.ini
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-26 17:49 - 2014-08-26 17:49 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-08-26 12:33 - 2014-08-28 06:57 - 00000000 ____D () C:\Users\Sacha\AppData\Local\CrashDumps
2014-08-26 09:10 - 2014-08-26 09:10 - 00000947 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-08-25 21:29 - 2014-08-25 21:29 - 00001443 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2014-08-25 21:13 - 2014-08-02 02:15 - 00704480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-08-25 21:13 - 2014-08-02 02:15 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-08-25 15:10 - 2014-07-16 00:51 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-08-25 12:12 - 2014-09-05 22:57 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\TS3Client
2014-08-25 12:11 - 2014-08-25 12:11 - 00001130 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-08-25 11:15 - 2014-09-06 16:09 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Awesomium
2014-08-24 18:10 - 2014-08-24 18:10 - 00000000 ____D () C:\ProgramData\Elder Scrolls Online
2014-08-24 08:48 - 2014-08-24 08:48 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-24 08:40 - 2014-08-24 08:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-24 08:25 - 2014-08-24 08:25 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-08-23 20:05 - 2014-08-23 20:05 - 00003092 _____ () C:\WINDOWS\System32\Tasks\{BAF8FCAB-FCC2-4F02-8397-4DD1DEE11862}
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\WINDOWS\jre
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2014-08-23 16:07 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2014-08-23 16:07 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2014-08-23 16:07 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2014-08-23 14:57 - 2014-08-23 16:09 - 00000000 ____D () C:\ESO
2014-08-23 14:57 - 2014-08-23 16:08 - 00000000 ___HD () C:\Program Files (x86)\Zero G Registry
2014-08-23 14:34 - 2014-08-23 14:34 - 00631560 _____ (ClickMeIn Limited) C:\Users\Sacha\AppData\Local\nsp2507.tmp
2014-08-23 14:01 - 2014-01-27 05:39 - 01939288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-08-23 14:01 - 2014-01-11 08:48 - 05979648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-08-23 14:01 - 2013-06-17 00:41 - 00997632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-08-23 14:01 - 2013-06-01 13:34 - 02391280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-08-23 14:01 - 2013-06-01 12:24 - 02106176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-08-23 14:01 - 2013-06-01 11:25 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2014-08-23 14:01 - 2013-06-01 11:24 - 01453568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-23 14:01 - 2013-06-01 11:24 - 00850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2014-08-23 14:01 - 2013-06-01 11:24 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2014-08-23 14:01 - 2013-06-01 11:23 - 01842176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2014-08-23 14:01 - 2013-06-01 11:23 - 00680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2014-08-23 14:01 - 2013-06-01 11:22 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2014-08-23 14:01 - 2013-06-01 11:22 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeParserTask.exe
2014-08-23 14:01 - 2013-06-01 11:21 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2014-08-23 14:01 - 2013-06-01 11:21 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 02219520 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 01527808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 01048576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2014-08-23 14:01 - 2013-06-01 11:20 - 00583168 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2014-08-23 14:01 - 2013-06-01 11:19 - 00785408 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2014-08-23 14:01 - 2013-06-01 11:19 - 00207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceSetupManager.dll
2014-08-23 14:01 - 2013-06-01 05:08 - 00117632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2DP.sys
2014-08-23 14:01 - 2013-06-01 05:08 - 00037632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthAvrcpTg.sys
2014-08-23 14:01 - 2013-05-25 00:09 - 01217352 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-08-23 14:01 - 2013-05-25 00:09 - 01093904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-08-23 14:00 - 2014-02-04 01:56 - 00332632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2014-08-23 14:00 - 2014-02-04 01:56 - 00278872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2014-08-23 14:00 - 2014-01-31 02:48 - 00485888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
2014-08-23 14:00 - 2014-01-31 02:06 - 00599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2014-08-23 14:00 - 2014-01-16 01:42 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
2014-08-23 14:00 - 2014-01-11 07:06 - 05092352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-08-23 14:00 - 2014-01-03 01:35 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsGdiConverter.dll
2014-08-23 14:00 - 2014-01-03 01:32 - 00523264 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsGdiConverter.dll
2014-08-23 13:49 - 2014-03-25 01:42 - 00305152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wusa.exe
2014-08-23 13:49 - 2014-03-25 00:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wusa.exe
2014-08-23 13:48 - 2012-09-27 09:17 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.exe
2014-08-23 13:48 - 2012-09-27 09:17 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndadmin.exe
2014-08-23 13:48 - 2012-09-27 09:15 - 00301568 _____ (Microsoft Corporation) C:\WINDOWS\system32\newdev.dll
2014-08-23 13:48 - 2012-09-27 08:35 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.exe
2014-08-23 13:48 - 2012-09-27 08:35 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndadmin.exe
2014-08-23 13:48 - 2012-09-27 08:34 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\newdev.dll
2014-08-23 13:46 - 2012-09-20 09:55 - 03265256 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\evbda.sys
2014-08-23 13:45 - 2012-09-20 10:40 - 00389360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2014-08-23 13:45 - 2012-09-20 09:55 - 00533224 _____ (Broadcom Corporation) C:\WINDOWS\system32\Drivers\bxvbda.sys
2014-08-23 13:45 - 2012-09-20 08:47 - 00307192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 03964416 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2014-08-23 13:45 - 2012-09-20 08:33 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-23 13:45 - 2012-09-20 08:33 - 01513984 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 01304064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Streaming.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 00757248 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSATAPI.dll
2014-08-23 13:45 - 2012-09-20 08:33 - 00420352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2014-08-23 13:45 - 2012-09-20 08:32 - 01739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\RacEngn.dll
2014-08-23 13:45 - 2012-09-20 08:32 - 01019392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2014-08-23 13:45 - 2012-09-20 08:32 - 00762368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provcore.dll
2014-08-23 13:45 - 2012-09-20 08:31 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2014-08-23 13:45 - 2012-09-20 08:31 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IPHLPAPI.DLL
2014-08-23 13:45 - 2012-09-20 08:30 - 01743872 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2014-08-23 13:45 - 2012-09-20 08:30 - 00634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2014-08-23 13:45 - 2012-09-20 07:55 - 00995328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Streaming.dll
2014-08-23 13:45 - 2012-09-20 07:54 - 01196032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2014-08-23 13:45 - 2012-09-20 07:54 - 00709632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2014-08-23 13:45 - 2012-09-20 07:53 - 00675840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2014-08-23 13:44 - 2012-09-20 10:31 - 00425192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2014-08-23 13:44 - 2012-09-20 08:33 - 00866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2014-08-23 13:44 - 2012-09-20 08:33 - 00545280 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskeng.exe
2014-08-23 13:44 - 2012-09-20 08:33 - 00541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-08-23 13:44 - 2012-09-20 08:33 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcredprov.dll
2014-08-23 13:44 - 2012-09-20 08:33 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2014-08-23 13:44 - 2012-09-20 08:32 - 01400832 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00755200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2014-08-23 13:44 - 2012-09-20 08:31 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2014-08-23 13:44 - 2012-09-20 08:30 - 00180736 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdsrv.dll
2014-08-23 13:44 - 2012-09-20 07:55 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSATAPI.dll
2014-08-23 13:44 - 2012-09-20 07:53 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IPHLPAPI.DLL
2014-08-23 13:43 - 2012-09-20 11:08 - 00027280 _____ (Microsoft Corporation) C:\WINDOWS\system32\avrt.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 01342464 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00627712 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetup.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpnpmgr.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00101888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpremove.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\vsstrace.dll
2014-08-23 13:43 - 2012-09-20 08:33 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\svchost.exe
2014-08-23 13:43 - 2012-09-20 08:33 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdbinst.exe
2014-08-23 13:43 - 2012-09-20 08:32 - 00256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityService.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfos.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\setbcdlocale.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfctrs.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfdisk.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfnet.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MUILanguageCleanup.dll
2014-08-23 13:43 - 2012-09-20 08:32 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shimeng.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevPropMgr.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcss.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\system32\LangCleanupSysprepAction.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\eventcls.dll
2014-08-23 13:43 - 2012-09-20 08:31 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpksetupproxyserv.dll
2014-08-23 13:43 - 2012-09-20 08:30 - 02016256 _____ (Microsoft Corporation) C:\WINDOWS\system32\batmeter.dll
2014-08-23 13:43 - 2012-09-20 08:30 - 00751104 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2014-08-23 13:43 - 2012-09-20 08:30 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\aelupsvc.dll
2014-08-23 13:43 - 2012-09-20 08:30 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2014-08-23 13:43 - 2012-09-20 08:13 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-power-events.dll
2014-08-23 13:43 - 2012-09-20 08:13 - 00023656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\avrt.dll
2014-08-23 13:43 - 2012-09-20 08:09 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2014-08-23 13:43 - 2012-09-20 07:55 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2014-08-23 13:43 - 2012-09-20 07:55 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2014-08-23 13:43 - 2012-09-20 07:55 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00263168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcredprov.dll
2014-08-23 13:43 - 2012-09-20 07:55 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskeng.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvinst.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\svchost.exe
2014-08-23 13:43 - 2012-09-20 07:55 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sdbinst.exe
2014-08-23 13:43 - 2012-09-20 07:54 - 01369600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RacEngn.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 01137152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provcore.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00509952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00480768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00413184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vsstrace.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00039424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfctrs.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfos.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfdisk.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfnet.dll
2014-08-23 13:43 - 2012-09-20 07:54 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shimeng.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 02007040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\batmeter.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 01247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2014-08-23 13:43 - 2012-09-20 07:53 - 00461824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 00366080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-23 13:43 - 2012-09-20 07:53 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eventcls.dll
2014-08-23 13:43 - 2012-09-20 06:10 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-08-23 13:31 - 2013-10-05 08:10 - 00285016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-08-23 13:31 - 2013-10-02 04:50 - 00447320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-23 13:31 - 2013-09-28 07:48 - 00778752 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2014-08-23 13:31 - 2013-09-28 05:58 - 00551424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2014-08-23 13:31 - 2013-08-30 07:19 - 00626688 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2014-08-23 13:31 - 2013-08-30 07:18 - 00374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-08-23 13:31 - 2013-08-30 01:48 - 00488960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2014-08-23 13:31 - 2013-08-30 01:47 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-08-23 13:24 - 2013-09-14 00:36 - 00247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ubpm.dll
2014-08-23 13:24 - 2013-09-14 00:33 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2014-08-23 13:24 - 2013-08-30 07:43 - 00061784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\crashdmp.sys
2014-08-23 13:24 - 2013-08-30 07:20 - 01173504 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2014-08-23 13:24 - 2013-08-30 01:48 - 00914432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2014-08-23 13:24 - 2013-08-21 08:39 - 00465240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2014-08-23 13:24 - 2013-08-10 08:30 - 00151896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2014-08-23 13:24 - 2013-07-25 01:10 - 10799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-23 13:24 - 2013-07-25 01:07 - 13661696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-23 13:24 - 2012-09-20 08:48 - 00062488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2014-08-23 13:13 - 2014-08-23 13:13 - 00411336 _____ () C:\Users\Sacha\Downloads\HDvid-codec-Chrome.exe
2014-08-23 13:12 - 2014-08-23 13:12 - 00448856 _____ () C:\Users\Sacha\Downloads\atdhd_download.exe
2014-08-23 13:11 - 2012-10-12 08:13 - 00109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dskquota.dll
2014-08-23 13:11 - 2012-10-12 07:39 - 00082944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dskquota.dll
2014-08-23 13:10 - 2012-10-24 06:54 - 00396008 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-23 13:10 - 2012-10-17 06:32 - 01172992 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2014-08-23 13:10 - 2012-10-17 06:32 - 00677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2014-08-23 13:10 - 2012-10-17 06:32 - 00673280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2014-08-23 13:10 - 2012-10-17 05:57 - 00929792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2014-08-23 13:10 - 2012-10-17 05:57 - 00568832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2014-08-23 13:10 - 2012-10-17 05:57 - 00513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2014-08-23 13:09 - 2012-10-11 07:46 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2014-08-23 13:08 - 2012-10-11 09:47 - 00793200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-08-23 13:08 - 2012-10-11 09:23 - 00441576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-08-23 13:08 - 2012-10-11 07:46 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Compression.dll
2014-08-23 13:08 - 2012-10-11 07:45 - 00579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2014-08-23 13:08 - 2012-10-11 07:42 - 00612416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-08-23 13:08 - 2012-10-11 07:07 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2014-08-23 13:08 - 2012-10-11 07:07 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2014-08-23 13:07 - 2012-10-11 09:25 - 00056552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2014-08-23 13:07 - 2012-10-11 09:13 - 00033512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\battc.sys
2014-08-23 13:07 - 2012-10-11 07:46 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2014-08-23 13:07 - 2012-10-11 07:45 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2014-08-23 13:07 - 2012-10-11 07:45 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2014-08-23 13:07 - 2012-10-11 07:44 - 00355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2014-08-23 13:07 - 2012-10-11 07:44 - 00264704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2014-08-23 13:07 - 2012-10-11 07:44 - 00259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\input.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 01280000 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00190976 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-23 13:07 - 2012-10-11 07:43 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-23 13:07 - 2012-10-11 07:23 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-pdc.dll
2014-08-23 13:07 - 2012-10-11 07:23 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\kbdhebl3.dll
2014-08-23 13:07 - 2012-10-11 07:07 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Compression.dll
2014-08-23 13:07 - 2012-10-11 07:07 - 00047616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\input.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-23 13:07 - 2012-10-11 07:06 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-23 13:07 - 2012-10-11 07:05 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2014-08-23 13:07 - 2012-10-11 06:42 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbdhebl3.dll
2014-08-23 13:03 - 2012-11-27 08:39 - 01122768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2014-08-23 13:03 - 2012-11-27 06:49 - 01027152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2014-08-23 13:03 - 2012-11-27 06:19 - 00955904 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2014-08-23 13:02 - 2013-07-09 10:04 - 00120144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-08-23 13:02 - 2013-07-09 08:18 - 00439488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2014-08-23 13:02 - 2013-07-09 06:25 - 00385768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2014-08-23 13:02 - 2013-07-09 05:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2014-08-23 13:02 - 2013-07-09 00:46 - 00543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-08-23 13:02 - 2013-07-09 00:46 - 00414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-08-23 13:02 - 2013-07-09 00:46 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanadvui.dll
2014-08-23 13:02 - 2013-07-09 00:45 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2014-08-23 13:02 - 2013-07-03 02:23 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2014-08-23 13:02 - 2013-07-03 02:22 - 02839552 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2014-08-23 13:02 - 2013-07-03 02:11 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2014-08-23 13:02 - 2013-07-03 02:10 - 02273792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2014-08-23 13:02 - 2013-07-01 00:30 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\openfiles.exe
2014-08-23 13:02 - 2013-07-01 00:29 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\openfiles.exe
2014-08-23 13:02 - 2013-06-29 08:15 - 00195416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2014-08-23 13:02 - 2013-06-29 08:15 - 00125784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2014-08-23 13:02 - 2013-06-26 05:01 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2014-08-23 13:02 - 2013-06-26 04:59 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2014-08-23 13:02 - 2013-06-25 00:54 - 00447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2014-08-23 13:02 - 2013-06-19 07:36 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2014-08-23 13:02 - 2013-06-19 07:36 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2014-08-23 13:02 - 2013-06-19 00:38 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2014-08-23 13:02 - 2013-06-19 00:38 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2014-08-23 13:02 - 2013-06-12 01:43 - 00154112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2014-08-23 13:02 - 2013-06-12 01:26 - 00230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2014-08-23 13:02 - 2013-06-06 10:03 - 00119040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2014-08-23 13:02 - 2012-11-27 06:20 - 01123840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-08-23 13:02 - 2012-11-27 06:20 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2014-08-23 13:02 - 2012-11-27 06:20 - 00798208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 00560128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2014-08-23 13:02 - 2012-11-27 06:20 - 00046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vds_ps.dll
2014-08-23 13:02 - 2012-11-27 06:19 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
2014-08-23 13:02 - 2012-11-27 06:19 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2014-08-23 13:02 - 2012-10-02 09:34 - 00068608 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2014-08-23 13:02 - 2012-09-11 07:28 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2014-08-23 13:02 - 2012-09-11 07:27 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2014-08-23 12:52 - 2014-05-03 08:34 - 06974808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-08-23 12:52 - 2014-04-30 00:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-23 12:52 - 2014-04-30 00:32 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-23 12:52 - 2013-10-31 07:56 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2014-08-23 12:52 - 2013-10-31 07:56 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2014-08-23 12:52 - 2013-10-31 06:01 - 00550400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2014-08-23 12:52 - 2013-10-31 05:42 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2014-08-23 12:52 - 2013-10-13 22:49 - 00100696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\disk.sys
2014-08-23 12:52 - 2013-08-27 07:21 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-23 12:52 - 2013-08-27 07:19 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2014-08-23 12:52 - 2013-08-27 00:29 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-23 12:52 - 2013-08-27 00:28 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2014-08-23 12:52 - 2012-10-11 07:46 - 00024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll
2014-08-23 12:52 - 2012-10-11 07:44 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll
2014-08-23 12:52 - 2012-10-11 07:07 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfapigp.dll
2014-08-23 12:42 - 2013-04-09 06:51 - 14267904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2014-08-23 12:42 - 2013-04-09 06:51 - 03552768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2014-08-23 12:42 - 2013-04-09 06:50 - 02107904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2014-08-23 12:42 - 2013-04-08 23:52 - 11878912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2014-08-23 12:41 - 2013-04-09 07:33 - 00489576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2014-08-23 12:41 - 2013-04-09 07:33 - 00446792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2014-08-23 12:41 - 2013-04-09 07:33 - 00253544 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2014-08-23 12:41 - 2013-04-09 07:20 - 00306952 _____ (Microsoft Corporation) C:\WINDOWS\system32\kd_02_10ec.dll
2014-08-23 12:41 - 2013-04-09 07:20 - 00086280 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2014-08-23 12:41 - 2013-04-09 07:18 - 00077960 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdvm.dll
2014-08-23 12:41 - 2013-04-09 06:52 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2014-08-23 12:41 - 2013-04-09 06:52 - 00804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2014-08-23 12:41 - 2013-04-09 06:52 - 00373760 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2014-08-23 12:41 - 2013-04-09 06:52 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2014-08-23 12:41 - 2013-04-09 06:51 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2014-08-23 12:41 - 2013-04-09 06:51 - 00456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2014-08-23 12:41 - 2013-04-09 06:51 - 00367616 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-08-23 12:41 - 2013-04-09 06:51 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\GenuineCenter.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2014-08-23 12:41 - 2013-04-09 06:50 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msshooks.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 01444864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhengine.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00196096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmvdsitf.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00172544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2014-08-23 12:41 - 2013-04-09 06:49 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fmifs.dll
2014-08-23 12:41 - 2013-04-09 06:48 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2014-08-23 12:41 - 2013-04-09 04:34 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys
2014-08-23 12:41 - 2013-04-09 04:33 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2014-08-23 12:41 - 2013-04-09 04:32 - 00805376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2014-08-23 12:41 - 2013-04-09 04:31 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2014-08-23 12:41 - 2013-04-09 01:44 - 00123880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2014-08-23 12:41 - 2013-04-09 01:37 - 00426024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2014-08-23 12:41 - 2013-04-09 01:37 - 00324368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2014-08-23 12:41 - 2013-04-08 23:52 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2014-08-23 12:41 - 2013-04-08 23:52 - 00302592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2014-08-23 12:41 - 2013-04-08 23:52 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2014-08-23 12:41 - 2013-04-08 23:51 - 02767360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 01113600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSAudDecMFT.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00361984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssphtb.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmvdsitf.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fmifs.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2014-08-23 12:41 - 2013-04-08 23:51 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msshooks.dll
2014-08-23 12:41 - 2013-04-05 01:30 - 00503080 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2014-08-23 12:41 - 2013-03-16 00:05 - 00298456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-23 12:41 - 2013-03-16 00:05 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-23 12:41 - 2013-02-02 10:40 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsRasterService.dll
2014-08-23 12:41 - 2012-12-13 05:59 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2014-08-23 12:41 - 2012-10-11 07:44 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssphtb.dll
2014-08-23 12:41 - 2012-10-11 07:44 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2014-08-23 12:41 - 2012-10-11 07:06 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2014-08-23 12:41 - 2012-10-11 07:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2014-08-23 12:41 - 2012-09-20 08:33 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhmanagew.exe
2014-08-23 12:41 - 2012-09-20 08:33 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\ndptsp.tsp
2014-08-23 12:41 - 2012-09-20 08:33 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kmddsp.tsp
2014-08-23 12:41 - 2012-09-20 08:32 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascfg.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdiag.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmxs.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasser.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwmp.dll
2014-08-23 12:41 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2014-08-23 12:41 - 2012-09-20 08:32 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxmasf.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00280576 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcat.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhshl.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvc.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchapi.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhevents.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsrchph.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhlisten.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhautoplay.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcleanup.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhtask.dll
2014-08-23 12:41 - 2012-09-20 08:31 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsvcctl.dll
2014-08-23 12:41 - 2012-09-20 08:12 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmploc.DLL
2014-08-23 12:41 - 2012-09-20 08:09 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2014-08-23 12:41 - 2012-09-20 07:55 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ndptsp.tsp
2014-08-23 12:41 - 2012-09-20 07:55 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kmddsp.tsp
2014-08-23 12:41 - 2012-09-20 07:54 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rascfg.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdiag.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasmxs.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasser.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwmp.dll
2014-08-23 12:41 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2014-08-23 12:41 - 2012-09-20 07:54 - 00004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxmasf.dll
2014-08-23 12:41 - 2012-09-20 07:32 - 09374208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmploc.DLL
2014-08-23 12:40 - 2013-01-10 03:40 - 00303848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2014-08-23 12:40 - 2012-12-13 06:00 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2014-08-23 12:39 - 2013-02-02 10:23 - 00228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsRasterService.dll
2014-08-23 09:59 - 2013-08-10 07:21 - 00448512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-08-23 09:59 - 2013-08-10 07:21 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncInfo.dll
2014-08-23 09:59 - 2013-08-10 05:58 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2014-08-23 09:59 - 2013-08-02 08:28 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll
2014-08-23 09:59 - 2013-08-02 07:08 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll
2014-08-23 09:59 - 2013-07-25 01:10 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mbsmsapi.dll
2014-08-23 09:59 - 2013-07-25 01:06 - 00225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mbsmsapi.dll
2014-08-23 09:59 - 2013-04-10 01:17 - 01125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2014-08-23 09:59 - 2013-04-10 00:29 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2014-08-23 09:59 - 2012-11-20 07:24 - 01164800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-08-23 09:59 - 2012-11-20 07:17 - 01184256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-08-23 09:59 - 2012-11-20 07:02 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKURD.DLL
2014-08-23 09:59 - 2012-11-20 06:59 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDKURD.DLL
2014-08-23 09:58 - 2013-08-03 08:40 - 01374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdc.dll
2014-08-23 09:58 - 2013-08-03 08:40 - 00566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wvc.dll
2014-08-23 09:58 - 2013-08-03 08:40 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmon.ocx
2014-08-23 09:58 - 2013-08-03 07:14 - 00399360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysmon.ocx
2014-08-23 09:58 - 2013-08-03 07:13 - 01245696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdc.dll
2014-08-23 09:58 - 2013-08-03 07:13 - 00437248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wvc.dll
2014-08-23 09:58 - 2012-11-06 09:33 - 01566432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2014-08-23 09:58 - 2012-11-06 09:33 - 00522640 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2014-08-23 09:58 - 2012-11-06 07:00 - 00463768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2014-08-23 09:58 - 2012-11-06 06:48 - 01150160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2014-08-23 09:58 - 2012-11-06 06:20 - 00516608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00386560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlansec.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00314880 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2014-08-23 09:58 - 2012-11-06 06:20 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2014-08-23 09:58 - 2012-11-06 06:20 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 08552448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glcndFilter.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 01386496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00710656 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00470016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcncsvc.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapPeerProxy.dll
2014-08-23 09:58 - 2012-11-06 06:19 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnEapAuthProxy.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 11459584 _____ (Microsoft Corporation) C:\WINDOWS\system32\glcndFilter.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2014-08-23 09:58 - 2012-11-06 06:18 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2014-08-23 09:58 - 2012-11-06 06:18 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2014-08-23 09:58 - 2012-11-06 06:17 - 00212992 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2014-08-23 09:58 - 2012-11-06 06:17 - 00110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2014-08-23 09:58 - 2012-11-06 06:00 - 00016384 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2014-08-23 09:58 - 2012-11-06 05:58 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2014-08-23 09:58 - 2012-11-06 05:56 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanhlp.dll
2014-08-23 09:58 - 2012-11-06 05:55 - 00090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2014-08-23 09:58 - 2012-11-06 05:55 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fxppm.sys
2014-08-23 09:57 - 2014-05-29 06:04 - 00094552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mountmgr.sys
2014-08-23 09:57 - 2014-05-08 03:34 - 00328024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2014-08-23 09:57 - 2014-03-01 11:47 - 01258496 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2014-08-23 09:57 - 2014-03-01 11:47 - 01120768 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2014-08-23 09:57 - 2014-03-01 10:07 - 01075200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2014-08-23 09:57 - 2014-03-01 08:59 - 00974848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2014-08-23 09:57 - 2014-02-27 01:18 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-23 09:57 - 2014-02-27 01:18 - 00215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-23 09:57 - 2014-02-15 06:15 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-08-23 09:57 - 2013-11-26 01:17 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidclass.sys
2014-08-23 09:47 - 2014-08-23 09:47 - 00001131 _____ () C:\WINDOWS\system32\netcfg-1893828.txt
2014-08-23 09:46 - 2014-08-23 09:46 - 00000000 ____D () C:\Users\Sacha\AppData\Local\BMExplorer
2014-08-23 09:39 - 2014-08-23 09:39 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-08-23 09:37 - 2014-05-20 04:33 - 00059416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-08-23 09:37 - 2014-05-20 01:45 - 00629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-08-23 09:37 - 2014-05-20 01:45 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 03286528 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 01623040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00773632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00253440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2014-08-23 09:37 - 2014-05-20 01:24 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-08-23 09:36 - 2014-08-23 09:36 - 00001829 _____ () C:\Users\Sacha\Desktop\Microsoft Office 2013 - Verknüpfung.lnk
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Deployment
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Apps\2.0
2014-08-23 09:36 - 2014-05-15 00:43 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2014-08-23 09:36 - 2014-05-15 00:43 - 00040448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2014-08-23 09:36 - 2014-05-15 00:42 - 00128000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2014-08-23 09:36 - 2014-05-15 00:42 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Oracle
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\.snippingtool++
2014-08-23 09:33 - 2014-08-23 09:33 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Sun
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-23 09:31 - 2014-08-23 09:31 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\WinRAR
2014-08-23 09:28 - 2014-08-23 09:28 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Snipping Tool++.exe
2014-08-23 08:56 - 2014-08-23 08:56 - 00000136 _____ () C:\WINDOWS\system32\netcfg-130468.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130250.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-128890.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000128 _____ () C:\WINDOWS\system32\netcfg-143203.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000136 _____ () C:\WINDOWS\system32\netcfg-293671.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293453.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293171.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000128 _____ () C:\WINDOWS\system32\netcfg-307750.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000136 _____ () C:\WINDOWS\system32\netcfg-245156.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-244812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-242812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000128 _____ () C:\WINDOWS\system32\netcfg-268281.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151921.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151859.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-141937.txt
2014-08-23 07:26 - 2014-08-23 07:30 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit
2014-08-23 07:07 - 2014-09-07 07:21 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-08-23 07:07 - 2014-08-23 07:16 - 00004094 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-23 07:07 - 2014-08-23 07:16 - 00003858 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-23 07:07 - 2014-08-23 07:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-23 07:06 - 2014-09-07 07:30 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-08-23 07:06 - 2014-08-25 16:05 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-23 07:06 - 2014-08-23 07:08 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-23 07:04 - 2014-08-23 07:04 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-08-23 07:03 - 2014-08-23 07:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-08-23 07:02 - 2014-08-23 07:03 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-08-23 07:02 - 2014-08-23 07:02 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-08-23 06:56 - 2014-08-25 18:31 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-23 06:56 - 2014-08-23 07:02 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-23 06:56 - 2014-08-23 06:56 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Microsoft Help
2014-08-23 03:56 - 2014-08-23 03:58 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-23 03:56 - 2014-07-31 23:41 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-23 03:02 - 2014-06-11 00:44 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-23 03:02 - 2014-06-11 00:43 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-23 01:14 - 2013-07-06 00:02 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbcir.sys
2014-08-23 01:14 - 2013-07-06 00:01 - 00210560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2014-08-23 01:14 - 2013-07-02 03:41 - 00337752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2014-08-23 01:14 - 2013-07-02 03:41 - 00213336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UCX01000.SYS
2014-08-23 01:14 - 2013-07-01 03:42 - 00623448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-23 01:14 - 2013-07-01 03:42 - 00498008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-23 01:14 - 2013-07-01 03:42 - 00079192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-23 01:14 - 2013-07-01 03:42 - 00021848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-23 01:14 - 2013-06-29 05:07 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-23 01:14 - 2013-06-29 05:06 - 00120832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2014-08-23 01:14 - 2013-06-22 07:45 - 00785624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Wdf01000.sys
2014-08-23 01:14 - 2013-06-22 07:45 - 00054488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdfLdr.sys
2014-08-23 01:13 - 2013-07-06 02:15 - 00652288 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll
2014-08-23 01:13 - 2013-07-04 04:13 - 00541696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll
2014-08-23 01:13 - 2013-04-12 00:30 - 01421312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2014-08-23 01:13 - 2013-04-12 00:22 - 01838080 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2014-08-23 01:12 - 2014-05-03 07:47 - 03246592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-08-23 01:12 - 2014-05-03 05:34 - 00235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-08-23 01:12 - 2012-10-12 10:08 - 00027880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpvideominiport.sys
2014-08-23 01:12 - 2012-10-12 08:14 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\rfxvmt.dll
2014-08-23 01:11 - 2013-10-19 07:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\imagehlp.dll
2014-08-23 01:11 - 2013-10-19 06:04 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imagehlp.dll
2014-08-23 01:11 - 2013-07-02 00:14 - 00025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbprint.sys
2014-08-23 01:11 - 2013-06-29 05:08 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2014-08-23 01:10 - 2014-06-13 03:57 - 01453400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-23 01:10 - 2014-06-13 03:55 - 00199680 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2014-08-23 01:10 - 2013-11-20 02:15 - 03842560 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2014-08-23 01:10 - 2013-11-20 01:57 - 03288576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2014-08-23 01:10 - 2013-07-20 00:13 - 00124112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2014-08-23 01:10 - 2013-07-20 00:13 - 00102608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2014-08-23 01:10 - 2013-05-04 09:58 - 00120736 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthHost.exe
2014-08-23 01:10 - 2013-05-04 08:59 - 01483776 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2014-08-23 01:10 - 2013-05-04 08:59 - 00812544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
2014-08-23 01:10 - 2013-05-04 08:58 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00169984 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2014-08-23 01:10 - 2013-05-04 08:58 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00560640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2014-08-23 01:10 - 2013-05-04 08:57 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\muifontsetup.dll
2014-08-23 01:10 - 2013-05-04 08:56 - 00419840 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2014-08-23 01:10 - 2013-05-04 06:58 - 00758784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
2014-08-23 01:10 - 2013-05-04 06:57 - 00303616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2014-08-23 01:10 - 2013-05-04 06:57 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\muifontsetup.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2014-08-23 01:10 - 2013-05-04 06:56 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\biwinrt.dll
2014-08-23 01:10 - 2013-05-04 06:55 - 00389632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2014-08-23 01:10 - 2013-05-04 06:51 - 00014848 _____ (Microsoft) C:\WINDOWS\system32\rars.rs
2014-08-23 01:10 - 2013-05-04 06:48 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidusb.sys
2014-08-23 01:10 - 2013-05-04 06:47 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2014-08-23 01:10 - 2013-05-04 06:10 - 00014848 _____ (Microsoft) C:\WINDOWS\SysWOW64\rars.rs
2014-08-23 01:10 - 2013-02-02 10:39 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2014-08-23 01:10 - 2013-02-02 10:39 - 00012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2014-08-23 01:08 - 2013-05-15 04:25 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\autochk.exe
2014-08-23 01:08 - 2013-05-15 04:25 - 00542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\untfs.dll
2014-08-23 01:08 - 2013-05-15 04:24 - 00793088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\autochk.exe
2014-08-23 01:08 - 2013-05-15 04:24 - 00482816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\untfs.dll
2014-08-23 01:08 - 2013-04-24 01:13 - 01013248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2014-08-23 01:08 - 2013-04-24 01:12 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2014-08-23 01:08 - 2013-04-24 00:56 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2014-08-23 01:08 - 2013-04-24 00:55 - 00141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptnet.dll
2014-08-23 01:07 - 2014-06-05 19:56 - 00112984 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-23 01:07 - 2014-06-05 19:29 - 02885632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-23 01:07 - 2014-06-05 19:29 - 00393216 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-23 01:07 - 2014-06-05 15:11 - 02416128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-23 01:07 - 2014-06-05 15:11 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-23 01:07 - 2014-05-30 00:24 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2014-08-23 01:07 - 2013-03-06 08:29 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2014-08-23 01:06 - 2012-11-03 07:26 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2014-08-23 01:06 - 2012-11-03 07:26 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2014-08-23 01:06 - 2012-11-03 07:24 - 00463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll

Telcorion · 07.09.2014, 06:52

Code:

ATTFilter

2014-08-23 01:06 - 2012-11-03 07:24 - 00067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2014-08-23 01:06 - 2012-11-03 07:24 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2014-08-23 01:06 - 2012-11-03 07:04 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2014-08-23 01:06 - 2012-11-03 07:04 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2014-08-23 01:06 - 2012-11-03 07:00 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2014-08-23 01:06 - 2012-11-03 07:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2014-08-23 01:06 - 2012-10-24 05:25 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
2014-08-23 01:06 - 2012-10-24 05:24 - 00405504 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2014-08-23 01:06 - 2012-10-24 05:24 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll
2014-08-23 01:06 - 2012-10-24 05:05 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll
2014-08-23 01:06 - 2012-10-10 09:04 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\synceng.dll
2014-08-23 01:06 - 2012-10-10 08:31 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\synceng.dll
2014-08-23 01:05 - 2013-03-02 12:57 - 00077544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2014-08-23 01:05 - 2013-03-02 12:39 - 00495336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2014-08-23 01:05 - 2013-03-02 12:39 - 00069864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2014-08-23 01:05 - 2013-03-02 11:59 - 00411880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-23 01:05 - 2013-03-02 10:23 - 00893952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2014-08-23 01:05 - 2013-03-02 10:23 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2014-08-23 01:05 - 2013-03-02 10:23 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2014-08-23 01:05 - 2013-03-02 10:23 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncInfo.dll
2014-08-23 01:05 - 2013-03-02 10:22 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-08-23 01:05 - 2013-03-02 10:21 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2014-08-23 01:05 - 2013-03-02 10:21 - 00145408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2014-08-23 01:05 - 2013-03-02 10:21 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevDispItemProvider.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 01149952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 01101824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpmde.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00951808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00645120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fsquirt.exe
2014-08-23 01:05 - 2013-03-02 04:45 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00171008 _____ (Microsoft Corporation) C:\WINDOWS\system32\TimeBrokerServer.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2014-08-23 01:05 - 2013-03-02 04:45 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhost.exe
2014-08-23 01:05 - 2013-03-02 04:45 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostex.exe
2014-08-23 01:05 - 2013-03-02 04:45 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDPrintProxy.DLL
2014-08-23 01:05 - 2013-03-02 04:44 - 00703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\NdisImPlatform.dll
2014-08-23 01:05 - 2013-03-02 04:44 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevDispItemProvider.dll
2014-08-23 01:05 - 2013-03-02 04:43 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2014-08-23 01:05 - 2013-03-02 04:15 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mouhid.sys
2014-08-23 01:05 - 2013-03-01 06:56 - 00156672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rfcomm.sys
2014-08-23 01:05 - 2013-03-01 06:56 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2014-08-23 01:05 - 2013-03-01 06:55 - 01175040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-08-23 01:05 - 2013-01-09 05:59 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
2014-08-23 01:05 - 2013-01-09 05:58 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2014-08-23 01:05 - 2012-11-06 06:20 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaext.dll
2014-08-23 01:05 - 2012-11-06 06:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wushareduxresources.dll
2014-08-23 01:04 - 2014-03-28 10:23 - 19759104 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-08-23 01:04 - 2014-03-28 08:18 - 17562112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-08-23 01:04 - 2014-01-31 02:48 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2014-08-23 01:03 - 2013-08-16 07:41 - 00058200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2014-08-23 01:03 - 2013-08-16 07:39 - 02371728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSService.dll
2014-08-23 01:03 - 2013-08-16 07:22 - 04917760 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2014-08-23 01:03 - 2013-08-16 07:21 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSClient.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSSync.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-08-23 01:03 - 2013-08-16 07:21 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSClient.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSSync.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00083968 _____ () C:\WINDOWS\SysWOW64\OEMLicense.dll
2014-08-23 01:03 - 2013-08-16 00:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-08-23 01:03 - 2013-08-16 00:42 - 00091648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll
2014-08-23 01:03 - 2013-08-16 00:42 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2014-08-23 01:03 - 2012-09-20 08:33 - 00110592 _____ () C:\WINDOWS\system32\OEMLicense.dll
2014-08-23 01:01 - 2013-02-02 10:38 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2014-08-23 01:01 - 2013-02-02 10:23 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlroamextension.dll
2014-08-23 01:01 - 2013-02-02 10:21 - 00385024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2014-08-23 01:01 - 2013-02-02 10:20 - 00729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2014-08-23 01:00 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2014-08-23 01:00 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptsvc.dll
2014-08-23 01:00 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepapi.dll
2014-08-23 01:00 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\apprepsync.dll
2014-08-23 01:00 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2014-08-23 01:00 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepapi.dll
2014-08-23 01:00 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apprepsync.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00410624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlroamextension.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00197632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2014-08-23 01:00 - 2013-02-02 10:40 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tasklist.exe
2014-08-23 01:00 - 2013-02-02 10:40 - 00079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskkill.exe
2014-08-23 01:00 - 2013-02-02 10:39 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2014-08-23 01:00 - 2013-02-02 10:24 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskkill.exe
2014-08-23 01:00 - 2013-02-02 10:24 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\tasklist.exe
2014-08-23 01:00 - 2013-02-02 10:23 - 00611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpd_ci.dll
2014-08-23 01:00 - 2013-02-02 10:23 - 00475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2014-08-23 01:00 - 2013-02-02 10:23 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2014-08-23 01:00 - 2013-02-02 10:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2014-08-23 01:00 - 2013-02-02 10:20 - 00260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\hotspotauth.dll
2014-08-23 01:00 - 2013-02-02 09:26 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BtaMPM.sys
2014-08-23 01:00 - 2013-02-02 09:25 - 00297984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-08-23 01:00 - 2012-11-27 05:55 - 00029952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthhfHid.sys
2014-08-23 01:00 - 2012-11-20 06:56 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbohci.sys
2014-08-23 01:00 - 2012-11-20 06:54 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidi2c.sys
2014-08-23 01:00 - 2012-09-20 08:32 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2014-08-23 01:00 - 2012-09-20 08:32 - 00072192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2014-08-23 00:59 - 2014-06-18 01:27 - 01440256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-08-23 00:59 - 2014-06-18 01:24 - 01557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-08-23 00:59 - 2014-06-06 16:06 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2014-08-23 00:59 - 2014-06-06 12:17 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2014-08-23 00:59 - 2013-12-09 02:45 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-23 00:59 - 2013-12-09 01:59 - 00600064 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-23 00:59 - 2013-05-27 01:17 - 00035328 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2014-08-23 00:59 - 2013-05-27 00:59 - 00046080 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2014-08-23 00:59 - 2013-05-25 05:15 - 00362496 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2014-08-23 00:59 - 2013-05-25 04:32 - 00300032 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2014-08-23 00:59 - 2012-11-26 06:21 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2014-08-23 00:59 - 2012-11-26 06:20 - 00086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptsslp.dll
2014-08-23 00:59 - 2012-11-08 06:24 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2014-08-23 00:59 - 2012-11-08 06:24 - 00010752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2014-08-23 00:59 - 2012-11-08 06:20 - 00096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2014-08-23 00:59 - 2012-11-08 06:20 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2014-08-23 00:59 - 2012-11-08 06:02 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2014-08-23 00:59 - 2012-11-08 06:01 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2014-08-23 00:58 - 2014-06-03 00:33 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2014-08-23 00:57 - 2013-10-02 01:37 - 01569280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2014-08-23 00:57 - 2013-10-02 01:26 - 01890816 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2014-08-23 00:56 - 2013-02-12 02:17 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usb8023.sys
2014-08-23 00:56 - 2013-02-02 07:41 - 01437184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-08-23 00:56 - 2013-02-02 07:31 - 01690624 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-08-23 00:52 - 2013-10-10 11:32 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscript.exe
2014-08-23 00:52 - 2013-10-10 11:30 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrobj.dll
2014-08-23 00:52 - 2013-10-10 11:30 - 00156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2014-08-23 00:52 - 2013-10-10 11:24 - 00143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2014-08-23 00:52 - 2013-10-10 11:23 - 00146944 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscript.exe
2014-08-23 00:52 - 2013-10-10 11:22 - 00222720 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrobj.dll
2014-08-23 00:52 - 2013-10-10 11:22 - 00194048 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2014-08-23 00:52 - 2013-04-03 01:37 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdlg.dll
2014-08-23 00:52 - 2013-04-03 01:12 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptdlg.dll
2014-08-23 00:52 - 2013-03-15 02:17 - 00861184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2014-08-23 00:48 - 2012-08-31 02:52 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr100_clr0400.dll
2014-08-23 00:47 - 2012-08-31 02:53 - 00017888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr100_clr0400.dll
2014-08-23 00:40 - 2014-05-30 01:31 - 00452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2014-08-23 00:40 - 2014-05-30 01:03 - 00588288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-08-23 00:40 - 2014-05-30 01:02 - 01281536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-08-23 00:40 - 2014-05-30 01:02 - 00439808 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2014-08-23 00:38 - 2014-08-07 08:33 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-08-23 00:38 - 2014-08-07 05:09 - 00556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-08-23 00:38 - 2014-07-01 00:42 - 00394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2014-08-23 00:38 - 2014-07-01 00:42 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-08-23 00:38 - 2013-10-10 13:53 - 00096600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2014-08-23 00:38 - 2013-10-10 11:21 - 01160192 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-23 00:38 - 2013-10-10 11:20 - 00723968 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-23 00:38 - 2013-06-10 21:16 - 00888832 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2014-08-23 00:38 - 2013-06-10 21:15 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2014-08-23 00:38 - 2013-06-10 21:10 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2014-08-23 00:38 - 2013-06-10 21:10 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2014-08-23 00:38 - 2013-01-10 03:53 - 00028904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpiowin32.sys
2014-08-23 00:38 - 2013-01-10 03:29 - 00091880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2014-08-23 00:38 - 2013-01-10 01:26 - 01752064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2014-08-23 00:38 - 2013-01-10 01:26 - 01611776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2014-08-23 00:38 - 2013-01-10 01:26 - 00436736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP4SDECD.DLL
2014-08-23 00:38 - 2013-01-10 01:26 - 00261120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-08-23 00:38 - 2013-01-10 01:26 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaacmgr.exe
2014-08-23 00:38 - 2013-01-10 01:23 - 02094592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2014-08-23 00:38 - 2013-01-10 01:23 - 01964544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 01886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 00406016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-08-23 00:38 - 2013-01-10 01:23 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
2014-08-23 00:38 - 2013-01-10 01:22 - 00894464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-08-23 00:38 - 2013-01-10 01:22 - 00666112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP4SDECD.DLL
2014-08-23 00:38 - 2013-01-10 01:22 - 00159232 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2014-08-23 00:38 - 2012-11-02 07:19 - 00171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhapi.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxp.dll
2014-08-23 00:38 - 2012-11-02 07:18 - 00015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll
2014-08-23 00:38 - 2012-10-06 06:53 - 02893824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2014-08-23 00:38 - 2012-10-06 06:15 - 02400256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2014-08-23 00:36 - 2013-08-23 09:22 - 02062848 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2014-08-23 00:36 - 2013-08-23 03:44 - 01711616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2014-08-23 00:36 - 2012-10-24 05:25 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgentc.exe
2014-08-23 00:36 - 2012-10-24 04:48 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgentc.exe
2014-08-23 00:35 - 2014-07-24 14:11 - 00051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-23 00:35 - 2014-07-24 14:10 - 02240000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-23 00:35 - 2014-07-24 14:10 - 01407488 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-23 00:35 - 2014-07-24 14:10 - 00915968 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2014-08-23 00:35 - 2014-07-24 14:10 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 19279872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 15399936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 03959296 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 02655232 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 01508864 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-23 00:35 - 2014-07-24 14:09 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00451584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00136704 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesysprep.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-23 00:35 - 2014-07-24 14:09 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-23 00:35 - 2014-07-24 12:52 - 01766400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-23 00:35 - 2014-07-24 12:52 - 01180672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-23 00:35 - 2014-07-24 12:52 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 14371328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 13757440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 02861568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 02054656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 01440768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-23 00:35 - 2014-07-24 12:51 - 00690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00493056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesysprep.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-23 00:35 - 2014-07-24 12:51 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-23 00:35 - 2014-07-24 12:33 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-23 00:35 - 2014-07-24 12:29 - 02706432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-23 00:35 - 2014-07-24 10:03 - 00534528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2014-08-23 00:35 - 2014-03-28 21:19 - 00035856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdBoot.sys
2014-08-23 00:35 - 2014-03-24 00:11 - 00269592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdFilter.sys
2014-08-23 00:34 - 2014-04-12 11:27 - 00172888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2014-08-23 00:34 - 2014-04-12 11:10 - 00578048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2014-08-23 00:34 - 2014-04-12 11:09 - 01043968 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
2014-08-23 00:34 - 2014-04-12 11:09 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2014-08-23 00:34 - 2014-04-12 11:09 - 00094720 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll
2014-08-23 00:34 - 2014-04-12 11:08 - 00827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2014-08-23 00:34 - 2014-04-12 11:08 - 00318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2014-08-23 00:34 - 2014-04-12 11:07 - 00020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00961536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2014-08-23 00:34 - 2014-04-12 09:23 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll
2014-08-23 00:34 - 2014-04-12 09:22 - 00666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2014-08-23 00:34 - 2014-04-12 09:22 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll
2014-08-23 00:34 - 2014-04-12 08:58 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\workerdd.dll
2014-08-23 00:34 - 2014-03-11 05:25 - 00100184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2014-08-23 00:34 - 2014-03-11 02:41 - 00559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2014-08-23 00:34 - 2014-03-11 02:41 - 00038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dimsroam.dll
2014-08-23 00:34 - 2014-03-11 02:39 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2014-08-23 00:34 - 2014-03-11 02:38 - 00982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dimsroam.dll
2014-08-23 00:34 - 2014-03-11 02:38 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2014-08-23 00:34 - 2014-03-10 05:05 - 00668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2014-08-23 00:34 - 2014-03-10 03:27 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2014-08-23 00:34 - 2014-03-04 01:07 - 00570216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2014-08-23 00:33 - 2013-12-05 01:43 - 00583680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdrm.dll
2014-08-23 00:33 - 2013-12-05 01:37 - 00451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdrm.dll
2014-08-23 00:33 - 2013-11-23 08:43 - 00420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMPhoto.dll
2014-08-23 00:33 - 2013-11-23 07:05 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMPhoto.dll
2014-08-23 00:31 - 2014-03-28 10:23 - 01287168 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-08-23 00:31 - 2013-03-22 05:49 - 02382336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2014-08-23 00:31 - 2013-03-22 00:47 - 02851840 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2014-08-23 00:31 - 2013-03-02 10:23 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2014-08-23 00:31 - 2013-03-02 04:44 - 01011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-23 00:31 - 2012-12-15 06:55 - 00443392 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2014-08-23 00:31 - 2012-11-03 07:26 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysreset.exe
2014-08-23 00:31 - 2012-11-03 07:25 - 00945152 _____ (Microsoft Corporation) C:\WINDOWS\system32\resetengmig.dll
2014-08-23 00:25 - 2014-06-20 01:35 - 01312768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-23 00:25 - 2014-06-20 00:24 - 00694272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-23 00:11 - 2014-09-04 22:00 - 00000000 ____D () C:\Users\Sacha\Downloads\Microsoft.Office.Professional.Plus.2013.x86.x64.VL.19.05.13.TRIBAL
2014-08-23 00:11 - 2014-08-23 00:11 - 00011744 _____ () C:\Users\Sacha\Downloads\MicrosoftOfficeProfessionalPlus2013x86x64VL190513TRIBAL@www.torrent.to.torrent
2014-08-23 00:01 - 2014-04-03 13:22 - 02233176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-22 23:59 - 2014-08-23 00:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-22 23:58 - 2014-09-02 18:45 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\DVDVideoSoft
2014-08-22 23:58 - 2014-08-23 00:01 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-22 23:58 - 2014-08-22 23:59 - 00000000 ___RD () C:\Users\Public\Desktop\DVDVideoSoft
2014-08-22 23:57 - 2014-08-22 23:56 - 00012265 _____ () C:\Users\Sacha\Desktop\batarde.zip
2014-08-22 23:54 - 2014-08-22 23:54 - 00000999 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000981 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Users\Sacha\Documents\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-08-22 23:53 - 2014-08-22 23:54 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-22 23:53 - 2014-04-25 17:44 - 01070152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCTL.OCX
2014-08-22 23:53 - 2014-04-25 17:44 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2014-08-22 23:53 - 2014-04-25 17:44 - 00137000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMAPI32.OCX
2014-08-22 23:53 - 2014-04-25 17:44 - 00110264 _____ (pdfforge GmbH) C:\WINDOWS\system32\pdfcmon.dll
2014-08-22 23:53 - 2014-04-25 17:44 - 00023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPIDE.DLL
2014-08-22 23:53 - 1998-07-06 18:56 - 00125712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6DE.DLL
2014-08-22 23:53 - 1998-07-06 18:55 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCDE.DLL
2014-08-22 23:53 - 1998-07-06 18:55 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCC2DE.DLL
2014-08-22 23:51 - 2014-08-22 23:51 - 00000999 _____ () C:\Users\Sacha\Desktop\PhotoScape.lnk
2014-08-22 23:51 - 2014-08-22 23:51 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-08-22 23:48 - 2014-09-07 06:56 - 00000000 ____D () C:\Program Files\WinRAR
2014-08-22 23:48 - 2014-09-06 08:15 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-22 23:48 - 2014-09-06 08:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-08-22 23:44 - 2014-01-31 02:48 - 01339392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2014-08-22 23:44 - 2014-01-31 02:06 - 01628160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2014-08-22 23:43 - 2014-08-22 23:43 - 02028976 _____ () C:\Users\Sacha\Desktop\winrar-x64-510d.exe
2014-08-22 23:42 - 2014-08-22 23:42 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Winrar.exe
2014-08-22 23:40 - 2014-08-26 09:13 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Winamp
2014-08-22 23:40 - 2014-08-26 09:10 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-08-22 23:40 - 2014-08-22 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-08-22 23:40 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-22 23:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-22 23:36 - 2014-08-23 09:20 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Google
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDStyler
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\Program Files (x86)\DVDStyler
2014-08-22 23:31 - 2014-08-23 02:25 - 00000000 ____D () C:\Windows.old
2014-08-22 23:30 - 2014-08-22 23:30 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-08-22 23:25 - 2014-08-22 23:25 - 00000000 ____D () C:\WINDOWS\pss
2014-08-22 23:18 - 2013-09-23 13:49 - 00197704 _____ (McAfee, Inc.) C:\WINDOWS\system32\Drivers\HipShieldK.sys
2014-08-22 23:17 - 2013-09-28 05:35 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2014-08-22 23:17 - 2013-08-07 07:15 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\tssdisai.dll
2014-08-22 23:17 - 2012-11-10 06:23 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2014-08-22 23:17 - 2012-11-10 06:23 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2014-08-22 23:17 - 2012-11-10 06:22 - 00126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDWebAI.dll
2014-08-22 23:17 - 2012-11-10 06:22 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmHostAI.dll
2014-08-22 23:17 - 2012-11-10 06:20 - 00135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appserverai.dll
2014-08-22 23:17 - 2012-10-11 09:02 - 01636672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2014-08-22 23:17 - 2012-10-11 07:45 - 00370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2014-08-22 23:17 - 2012-10-11 07:19 - 00005632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2014-08-22 23:17 - 2012-10-11 07:18 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2014-08-22 23:15 - 2014-03-07 02:47 - 01419264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2014-08-22 23:15 - 2014-03-07 02:08 - 01845760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2014-08-22 23:15 - 2013-11-01 07:38 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msieftp.dll
2014-08-22 23:15 - 2013-11-01 05:49 - 00273408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msieftp.dll
2014-08-22 23:15 - 2012-11-01 06:41 - 01802240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2014-08-22 23:15 - 2012-11-01 06:40 - 02361344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2014-08-22 23:15 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2014-08-22 23:15 - 2012-11-01 06:21 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2014-08-22 23:15 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2014-08-22 23:15 - 2012-11-01 06:20 - 00002048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2014-08-22 23:09 - 2014-08-22 23:09 - 00000797 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-08-22 23:06 - 2014-08-23 00:39 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\uTorrent
2014-08-22 23:04 - 2014-08-26 00:36 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-08-22 23:04 - 2014-08-23 20:32 - 00001849 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\$WINDOWS.~BT
2014-08-22 22:52 - 2014-09-07 07:47 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2359974274-1062960934-2306791803-1002
2014-08-22 22:49 - 2014-08-22 22:49 - 00000000 ____D () C:\Users\Sacha\AppData\Local\EgisTec IPS
2014-08-22 22:47 - 2014-08-25 11:04 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Atheros
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-08-22 22:44 - 2014-08-23 20:32 - 00001446 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\lm
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Preload
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Accessory Store
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Macromedia
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Adobe
2014-08-22 22:40 - 2014-08-22 22:40 - 00000000 ____D () C:\Users\Sacha\AppData\Local\VirtualStore
2014-08-22 22:39 - 2014-08-27 22:45 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Packages
2014-08-22 22:39 - 2014-08-22 22:39 - 00000020 ___SH () C:\Users\Sacha\ntuser.ini
2014-08-22 22:38 - 2014-09-07 01:27 - 01413779 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-378171.txt
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-375125.txt
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-08-22 22:33 - 2014-09-07 07:25 - 00000000 ____D () C:\Users\Sacha
2014-08-22 22:33 - 2014-08-27 22:29 - 00000000 ____D () C:\Users\UpdatusUser.000
2014-08-22 22:33 - 2014-08-22 22:35 - 00026673 _____ () C:\WINDOWS\diagwrn.xml
2014-08-22 22:33 - 2014-08-22 22:35 - 00026673 _____ () C:\WINDOWS\diagerr.xml
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-90343.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-89187.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-81234.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Anwendungsdaten
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ___RD () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:33 - 2012-07-26 10:13 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-08-22 22:00 - 2014-08-23 01:44 - 00000000 ___HD () C:\$SysReset
2014-08-22 21:58 - 2014-08-23 16:08 - 00001603 _____ () C:\Users\Sacha\Desktop\The Elder Scrolls Online.lnk
2014-08-22 19:01 - 2014-08-22 21:53 - 00017037 _____ () C:\Users\Sacha\Desktop\Artikelnummern.xlsx
2014-08-22 08:43 - 2014-08-22 18:00 - 00000000 ____D () C:\Games
2014-08-21 20:17 - 2014-08-21 20:17 - 14947660 _____ () C:\Users\Sacha\Desktop\Dudelsack - Bärentanz.mp4
2014-08-19 15:33 - 2014-09-05 09:58 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD & Brennen
2014-08-19 15:27 - 2014-08-19 15:30 - 00000000 ____D () C:\Users\Sacha\Desktop\Spiele
2014-08-19 15:26 - 2014-08-19 15:34 - 00000000 ____D () C:\Users\Sacha\Desktop\Bildbearbeitung
2014-08-18 16:17 - 2009-02-12 18:11 - 00004017 _____ () C:\Users\Sacha\Desktop\_mod_on_off.h
2014-08-14 17:27 - 2014-08-14 17:27 - 00000000 ____D () C:\Users\Sacha\.thumb
2014-08-13 21:38 - 2014-09-07 07:20 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD´s
2014-08-13 09:07 - 2014-08-13 09:07 - 00585920 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\BPM Studio PRO.exe
2014-08-13 09:05 - 2014-08-13 09:06 - 11600939 _____ (AlcaTech ) C:\Users\Sacha\Downloads\bpmdemo.exe
2014-08-12 18:46 - 2014-08-12 18:51 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup.exe
2014-08-12 18:46 - 2014-08-12 18:51 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup (1).exe
2014-08-11 19:29 - 2014-08-11 19:29 - 00506140 _____ () C:\Users\Sacha\Downloads\Telcorion.htm
2014-08-11 19:22 - 2014-08-11 19:22 - 00312261 _____ () C:\Users\Sacha\Downloads\photo.htm
2014-08-11 19:03 - 2014-08-11 19:03 - 00294321 _____ () C:\Users\Sacha\Downloads\869314513098447.htm
2014-08-11 10:33 - 2014-08-11 10:33 - 00396756 _____ () C:\Users\Sacha\Downloads\733693106669417-0.htm

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-07 07:47 - 2014-09-03 16:32 - 00020047 _____ () C:\Users\Sacha\Desktop\FRST.txt
2014-09-07 07:47 - 2014-09-03 16:32 - 00000000 ____D () C:\FRST
2014-09-07 07:47 - 2014-08-22 22:52 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2359974274-1062960934-2306791803-1002
2014-09-07 07:45 - 2014-09-07 07:45 - 00000839 _____ () C:\Users\Sacha\Desktop\JRT.txt
2014-09-07 07:40 - 2014-09-07 07:40 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-09-07 07:35 - 2014-09-07 07:35 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2014-09-07 07:35 - 2012-09-03 13:21 - 00001848 _____ () C:\Users\Public\Desktop\McAfee Internet Security Suite.lnk
2014-09-07 07:34 - 2014-09-07 07:34 - 01016261 _____ (Thisisu) C:\Users\Sacha\Desktop\JRT.exe
2014-09-07 07:30 - 2014-08-23 07:06 - 00001118 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-07 07:29 - 2014-09-07 07:29 - 00354392 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-09-07 07:29 - 2012-09-03 12:56 - 00026402 _____ () C:\WINDOWS\PFRO.log
2014-09-07 07:29 - 2012-07-26 09:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-07 07:28 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-07 07:27 - 2014-09-07 07:23 - 00000000 ____D () C:\AdwCleaner
2014-09-07 07:25 - 2014-08-22 22:33 - 00000000 ____D () C:\Users\Sacha
2014-09-07 07:21 - 2014-08-23 07:07 - 00001122 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-07 07:20 - 2014-08-13 21:38 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD´s
2014-09-07 07:00 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-07 06:57 - 2012-07-26 07:26 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2014-09-07 06:56 - 2014-08-22 23:48 - 00000000 ____D () C:\Program Files\WinRAR
2014-09-07 01:27 - 2014-08-22 22:38 - 01413779 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-07 01:27 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-09-07 01:27 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\WinStore
2014-09-07 00:30 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-09-06 16:09 - 2014-08-25 11:15 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Awesomium
2014-09-06 08:15 - 2014-08-22 23:48 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-06 08:15 - 2014-08-22 23:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-09-06 07:23 - 2014-06-05 21:30 - 00001137 _____ () C:\Users\Sacha\Desktop\Musik - Verknüpfung.lnk
2014-09-06 07:20 - 2012-09-03 13:19 - 00000000 ____D () C:\Program Files (x86)\McAfee
2014-09-05 22:57 - 2014-08-25 12:12 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\TS3Client
2014-09-05 19:32 - 2014-09-05 19:32 - 01370483 _____ () C:\Users\Sacha\Desktop\adwcleaner_3.309.exe
2014-09-05 09:58 - 2014-08-19 15:33 - 00000000 ____D () C:\Users\Sacha\Desktop\DVD & Brennen
2014-09-04 22:04 - 2014-05-16 23:00 - 00000000 ____D () C:\Users\Sacha\Downloads\Spiele und mehr
2014-09-04 22:00 - 2014-08-23 00:11 - 00000000 ____D () C:\Users\Sacha\Downloads\Microsoft.Office.Professional.Plus.2013.x86.x64.VL.19.05.13.TRIBAL
2014-09-04 14:38 - 2014-09-02 08:14 - 00000000 ____D () C:\Users\Sacha\Desktop\Got
2014-09-03 16:45 - 2014-09-03 16:42 - 00050571 _____ () C:\Users\Sacha\Desktop\Addition.txt
2014-09-03 16:15 - 2014-09-03 16:15 - 02104832 _____ (Farbar) C:\Users\Sacha\Desktop\FRST64.exe
2014-09-03 15:07 - 2014-08-30 10:18 - 00000000 ____D () C:\Users\Sacha\AppData\Local\clear.fi
2014-09-02 18:45 - 2014-08-22 23:58 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\DVDVideoSoft
2014-08-30 20:15 - 2014-08-30 20:10 - 00000000 ____D () C:\Users\Sacha\AppData\Local\paint.net
2014-08-30 20:11 - 2014-08-30 20:11 - 00001304 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00001292 _____ () C:\Users\Public\Desktop\paint.net.lnk
2014-08-30 20:11 - 2014-08-30 20:11 - 00000000 ____D () C:\Program Files\paint.net
2014-08-30 20:09 - 2014-08-30 20:09 - 06272852 _____ () C:\Users\Sacha\Downloads\paint.net.4.0.3.install.zip
2014-08-30 17:47 - 2013-09-16 14:48 - 00000000 ___RD () C:\Users\Sacha\Google Drive
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\CyberLink
2014-08-30 14:23 - 2014-08-30 14:23 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Cyberlink
2014-08-30 14:22 - 2012-09-26 11:55 - 00000000 ____D () C:\ProgramData\CyberLink
2014-08-28 06:57 - 2014-08-26 12:33 - 00000000 ____D () C:\Users\Sacha\AppData\Local\CrashDumps
2014-08-28 06:53 - 2012-09-26 21:09 - 00753134 _____ () C:\WINDOWS\system32\perfh007.dat
2014-08-28 06:53 - 2012-09-26 21:09 - 00155826 _____ () C:\WINDOWS\system32\perfc007.dat
2014-08-28 06:53 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-28 06:53 - 2012-07-26 09:28 - 01745416 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-08-27 22:45 - 2014-08-27 22:39 - 00000000 ___RD () C:\WINDOWS\BrowserChoice
2014-08-27 22:45 - 2014-08-22 22:39 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Packages
2014-08-27 22:45 - 2012-09-03 13:07 - 00000000 ____D () C:\ProgramData\PRICache
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\SysWOW64\NV
2014-08-27 22:44 - 2014-08-27 22:44 - 00000000 ____D () C:\WINDOWS\system32\NV
2014-08-27 22:44 - 2012-09-26 11:23 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Defender
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-08-27 22:39 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-08-27 22:38 - 2012-07-26 10:12 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-08-27 22:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows Photo Viewer
2014-08-27 22:38 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files (x86)\Windows Photo Viewer
2014-08-27 22:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\SysWOW64\Dism
2014-08-27 22:38 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\Dism
2014-08-27 22:30 - 2014-08-27 22:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000020 ___SH () C:\Users\UpdatusUser.000\ntuser.ini
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-27 22:29 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-08-27 22:29 - 2014-08-22 22:33 - 00000000 ____D () C:\Users\UpdatusUser.000
2014-08-27 22:26 - 2012-09-26 11:21 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-08-27 22:21 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\AUInstallAgent
2014-08-27 22:15 - 2014-08-05 15:45 - 00097282 _____ () C:\Users\Sacha\Documents\report.txt
2014-08-27 19:32 - 2012-09-03 13:19 - 00000000 ____D () C:\Program Files\Common Files\mcafee
2014-08-26 21:50 - 2012-07-26 07:26 - 00000301 _____ () C:\WINDOWS\win.ini
2014-08-26 17:49 - 2014-08-26 17:49 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_LocationProvider_01_11_00.Wdf
2014-08-26 17:49 - 2012-07-26 09:21 - 00040786 _____ () C:\WINDOWS\setupact.log
2014-08-26 09:13 - 2014-08-22 23:40 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Winamp
2014-08-26 09:10 - 2014-08-26 09:10 - 00000947 _____ () C:\Users\Public\Desktop\Winamp.lnk
2014-08-26 09:10 - 2014-08-22 23:40 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-08-26 00:36 - 2014-08-22 23:04 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-08-25 21:29 - 2014-08-25 21:29 - 00001443 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2014-08-25 21:00 - 2012-07-26 10:12 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-08-25 21:00 - 2012-07-26 07:38 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-08-25 20:59 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\SecureBootUpdates
2014-08-25 20:59 - 2012-07-26 09:52 - 00000000 ____D () C:\Program Files\Windows Journal
2014-08-25 20:58 - 2012-07-26 10:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools
2014-08-25 18:31 - 2014-08-23 06:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-08-25 18:06 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Common Files\System
2014-08-25 16:05 - 2014-08-23 07:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-08-25 12:11 - 2014-08-25 12:11 - 00001130 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-08-25 12:11 - 2014-08-25 12:11 - 00000000 ____D () C:\Program Files (x86)\TeamSpeak 3 Client
2014-08-25 11:04 - 2014-08-22 22:47 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Atheros
2014-08-24 18:10 - 2014-08-24 18:10 - 00000000 ____D () C:\ProgramData\Elder Scrolls Online
2014-08-24 08:48 - 2014-08-24 08:48 - 00000000 ____D () C:\Users\Default\AppData\Local\Microsoft Help
2014-08-24 08:40 - 2014-08-24 08:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-24 08:25 - 2014-08-24 08:25 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2014-08-23 20:32 - 2014-08-22 23:04 - 00001849 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-08-23 20:32 - 2014-08-22 22:44 - 00001446 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-08-23 20:05 - 2014-08-23 20:05 - 00003092 _____ () C:\WINDOWS\System32\Tasks\{BAF8FCAB-FCC2-4F02-8397-4DD1DEE11862}
2014-08-23 17:38 - 2012-09-03 13:19 - 00000000 ____D () C:\ProgramData\McAfee
2014-08-23 16:09 - 2014-08-23 14:57 - 00000000 ____D () C:\ESO
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\WINDOWS\jre
2014-08-23 16:08 - 2014-08-23 16:08 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The Elder Scrolls Online
2014-08-23 16:08 - 2014-08-23 14:57 - 00000000 ___HD () C:\Program Files (x86)\Zero G Registry
2014-08-23 16:08 - 2014-08-22 21:58 - 00001603 _____ () C:\Users\Sacha\Desktop\The Elder Scrolls Online.lnk
2014-08-23 14:34 - 2014-08-23 14:34 - 00631560 _____ (ClickMeIn Limited) C:\Users\Sacha\AppData\Local\nsp2507.tmp
2014-08-23 13:13 - 2014-08-23 13:13 - 00411336 _____ () C:\Users\Sacha\Downloads\HDvid-codec-Chrome.exe
2014-08-23 13:12 - 2014-08-23 13:12 - 00448856 _____ () C:\Users\Sacha\Downloads\atdhd_download.exe
2014-08-23 09:47 - 2014-08-23 09:47 - 00001131 _____ () C:\WINDOWS\system32\netcfg-1893828.txt
2014-08-23 09:46 - 2014-08-23 09:46 - 00000000 ____D () C:\Users\Sacha\AppData\Local\BMExplorer
2014-08-23 09:46 - 2012-09-26 11:41 - 00000000 ____D () C:\ProgramData\Atheros
2014-08-23 09:39 - 2014-08-23 09:39 - 00000000 ____H () C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-08-23 09:36 - 2014-08-23 09:36 - 00001829 _____ () C:\Users\Sacha\Desktop\Microsoft Office 2013 - Verknüpfung.lnk
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Deployment
2014-08-23 09:36 - 2014-08-23 09:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Apps\2.0
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Oracle
2014-08-23 09:34 - 2014-08-23 09:34 - 00000000 ____D () C:\Users\Sacha\.snippingtool++
2014-08-23 09:33 - 2014-08-23 09:33 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-08-23 09:33 - 2014-08-23 09:33 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Sun
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Oracle
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-08-23 09:33 - 2014-08-23 09:33 - 00000000 ____D () C:\Program Files (x86)\Java
2014-08-23 09:31 - 2014-08-23 09:31 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\WinRAR
2014-08-23 09:28 - 2014-08-23 09:28 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Snipping Tool++.exe
2014-08-23 09:20 - 2014-08-22 23:36 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Google
2014-08-23 09:15 - 2012-07-26 07:37 - 00000000 ____D () C:\WINDOWS\servicing
2014-08-23 08:56 - 2014-08-23 08:56 - 00000136 _____ () C:\WINDOWS\system32\netcfg-130468.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-130250.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000134 _____ () C:\WINDOWS\system32\netcfg-128890.txt
2014-08-23 08:56 - 2014-08-23 08:56 - 00000128 _____ () C:\WINDOWS\system32\netcfg-143203.txt
2014-08-23 08:47 - 2014-08-27 22:52 - 04036096 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-23 08:37 - 2014-08-23 08:37 - 00000136 _____ () C:\WINDOWS\system32\netcfg-293671.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293453.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000134 _____ () C:\WINDOWS\system32\netcfg-293171.txt
2014-08-23 08:37 - 2014-08-23 08:37 - 00000128 _____ () C:\WINDOWS\system32\netcfg-307750.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000136 _____ () C:\WINDOWS\system32\netcfg-245156.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-244812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000134 _____ () C:\WINDOWS\system32\netcfg-242812.txt
2014-08-23 07:54 - 2014-08-23 07:54 - 00000128 _____ () C:\WINDOWS\system32\netcfg-268281.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151921.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-151859.txt
2014-08-23 07:52 - 2014-08-23 07:52 - 00000117 _____ () C:\WINDOWS\system32\netcfg-141937.txt
2014-08-23 07:31 - 2013-08-22 18:42 - 00000000 ____D () C:\Users\Sacha\Desktop\diverse Converter
2014-08-23 07:30 - 2014-08-23 07:26 - 00000000 ____D () C:\ProgramData\Microsoft Toolkit
2014-08-23 07:16 - 2014-08-23 07:07 - 00004094 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2014-08-23 07:16 - 2014-08-23 07:07 - 00003858 _____ () C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2014-08-23 07:08 - 2014-08-23 07:06 - 00000000 ____D () C:\Program Files (x86)\Google
2014-08-23 07:07 - 2014-08-23 07:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-08-23 07:04 - 2014-08-23 07:04 - 00000000 ____D () C:\Program Files\Common Files\DESIGNER
2014-08-23 07:03 - 2014-08-23 07:03 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2014-08-23 07:03 - 2014-08-23 07:02 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2014-08-23 07:02 - 2014-08-23 07:02 - 00000000 ____D () C:\WINDOWS\PCHEALTH
2014-08-23 07:02 - 2014-08-23 06:56 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-08-23 07:02 - 2012-09-26 11:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Office
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files\Microsoft Analysis Services
2014-08-23 06:57 - 2014-08-23 06:57 - 00000000 ____D () C:\Program Files (x86)\Microsoft Analysis Services
2014-08-23 06:57 - 2012-07-26 09:52 - 00000000 ____D () C:\WINDOWS\ShellNew
2014-08-23 06:56 - 2014-08-23 06:56 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Microsoft Help
2014-08-23 03:58 - 2014-08-23 03:56 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-23 02:25 - 2014-08-22 23:31 - 00000000 ____D () C:\Windows.old
2014-08-23 01:44 - 2014-08-22 22:00 - 00000000 ___HD () C:\$SysReset
2014-08-23 00:39 - 2014-08-22 23:06 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\uTorrent
2014-08-23 00:11 - 2014-08-23 00:11 - 00011744 _____ () C:\Users\Sacha\Downloads\MicrosoftOfficeProfessionalPlus2013x86x64VL190513TRIBAL@www.torrent.to.torrent
2014-08-23 00:01 - 2014-08-22 23:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2014-08-23 00:01 - 2014-08-22 23:58 - 00000000 ____D () C:\Program Files (x86)\DVDVideoSoft
2014-08-22 23:59 - 2014-08-22 23:58 - 00000000 ___RD () C:\Users\Public\Desktop\DVDVideoSoft
2014-08-22 23:56 - 2014-08-22 23:57 - 00012265 _____ () C:\Users\Sacha\Desktop\batarde.zip
2014-08-22 23:54 - 2014-08-22 23:54 - 00000999 _____ () C:\Users\Public\Desktop\PDFCreator.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000981 _____ () C:\Users\Public\Desktop\PDF Architect 2.lnk
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Users\Sacha\Documents\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFCreator
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:54 - 00000000 ____D () C:\Program Files (x86)\PDF Architect 2
2014-08-22 23:54 - 2014-08-22 23:53 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-22 23:51 - 2014-08-22 23:51 - 00000999 _____ () C:\Users\Sacha\Desktop\PhotoScape.lnk
2014-08-22 23:51 - 2014-08-22 23:51 - 00000000 ____D () C:\Program Files (x86)\PhotoScape
2014-08-22 23:45 - 2012-09-03 13:14 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-22 23:45 - 2012-09-03 13:14 - 00000000 ____D () C:\ProgramData\WildTangent
2014-08-22 23:43 - 2014-08-22 23:43 - 02028976 _____ () C:\Users\Sacha\Desktop\winrar-x64-510d.exe
2014-08-22 23:42 - 2014-08-22 23:42 - 00577728 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\Winrar.exe
2014-08-22 23:40 - 2014-08-22 23:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2014-08-22 23:40 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\restore
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDStyler
2014-08-22 23:34 - 2014-08-22 23:34 - 00000000 ____D () C:\Program Files (x86)\DVDStyler
2014-08-22 23:31 - 2012-07-26 10:13 - 00262144 _____ () C:\WINDOWS\system32\config\BCD-Template
2014-08-22 23:30 - 2014-08-22 23:30 - 00262144 _____ () C:\WINDOWS\system32\config\userdiff
2014-08-22 23:25 - 2014-08-22 23:25 - 00000000 ____D () C:\WINDOWS\pss
2014-08-22 23:16 - 2012-07-26 10:12 - 00000000 ___HD () C:\WINDOWS\ELAMBKUP
2014-08-22 23:09 - 2014-08-22 23:09 - 00000797 _____ () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\Users\Sacha\AppData\Local\Opera
2014-08-22 23:04 - 2014-08-22 23:04 - 00000000 ____D () C:\$WINDOWS.~BT
2014-08-22 23:00 - 2014-07-09 19:07 - 00000000 ____D () C:\download
2014-08-22 22:49 - 2014-08-22 22:49 - 00000000 ____D () C:\Users\Sacha\AppData\Local\EgisTec IPS
2014-08-22 22:49 - 2012-09-03 13:23 - 00000000 ____D () C:\ProgramData\EgisTec IPS
2014-08-22 22:48 - 2014-05-03 19:06 - 00001379 _____ () C:\Users\Sacha\Desktop\Telegram.lnk
2014-08-22 22:46 - 2012-09-03 13:49 - 00000000 ___HD () C:\OEM
2014-08-22 22:45 - 2014-08-22 22:45 - 00000000 ____D () C:\WINDOWS\System32\Tasks\WPD
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\lm
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Preload
2014-08-22 22:44 - 2014-08-22 22:44 - 00000000 ____D () C:\Program Files\Accessory Store
2014-08-22 22:44 - 2012-09-26 11:48 - 00000000 ____D () C:\ProgramData\OEM
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Macromedia
2014-08-22 22:42 - 2014-08-22 22:42 - 00000000 ____D () C:\Users\Sacha\AppData\Roaming\Adobe
2014-08-22 22:40 - 2014-08-22 22:40 - 00000000 ____D () C:\Users\Sacha\AppData\Local\VirtualStore
2014-08-22 22:39 - 2014-08-22 22:39 - 00000020 ___SH () C:\Users\Sacha\ntuser.ini
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-378171.txt
2014-08-22 22:38 - 2014-08-22 22:38 - 00000117 _____ () C:\WINDOWS\system32\netcfg-375125.txt
2014-08-22 22:38 - 2012-09-03 13:56 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Netzwerkumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Lokale Einstellungen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Eigene Dateien
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Druckumgebung
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Musik
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Documents\Eigene Bilder
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Verlauf
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\AppData\Local\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Users\Default\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Vorlagen
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Startmenü
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Dokumente
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\ProgramData\Anwendungsdaten
2014-08-22 22:36 - 2014-08-22 22:36 - 00000000 _SHDL () C:\Program Files\Gemeinsame Dateien
2014-08-22 22:36 - 2012-07-26 10:12 - 00000000 ____D () C:\Program Files\Windows NT
2014-08-22 22:36 - 2012-07-26 07:37 - 00000000 __RHD () C:\Users\Default
2014-08-22 22:35 - 2014-08-22 22:33 - 00026673 _____ () C:\WINDOWS\diagwrn.xml
2014-08-22 22:35 - 2014-08-22 22:33 - 00026673 _____ () C:\WINDOWS\diagerr.xml
2014-08-22 22:35 - 2012-07-26 10:12 - 00000000 __RHD () C:\Users\Public\Libraries
2014-08-22 22:35 - 2012-07-26 10:12 - 00000000 ____D () C:\WINDOWS\system32\Recovery
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-90343.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-89187.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000117 _____ () C:\WINDOWS\system32\netcfg-81234.txt
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\UpdatusUser.000\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Vorlagen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Startmenü
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Netzwerkumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Lokale Einstellungen
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Eigene Dateien
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Druckumgebung
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Musik
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Documents\Eigene Bilder
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Verlauf
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\AppData\Local\Anwendungsdaten
2014-08-22 22:33 - 2014-08-22 22:33 - 00000000 _SHDL () C:\Users\Sacha\Anwendungsdaten
2014-08-22 21:53 - 2014-08-22 19:01 - 00017037 _____ () C:\Users\Sacha\Desktop\Artikelnummern.xlsx
2014-08-22 18:19 - 2013-12-01 16:13 - 00000000 __RDO () C:\Users\Sacha\SkyDrive
2014-08-22 18:00 - 2014-08-22 08:43 - 00000000 ____D () C:\Games
2014-08-21 23:12 - 2013-01-05 00:23 - 03952640 ___SH () C:\Users\Sacha\Desktop\Thumbs.db
2014-08-21 20:17 - 2014-08-21 20:17 - 14947660 _____ () C:\Users\Sacha\Desktop\Dudelsack - Bärentanz.mp4
2014-08-21 01:40 - 2014-09-07 00:26 - 00732880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationUI.exe
2014-08-20 19:05 - 2014-09-07 00:26 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-08-20 19:05 - 2014-09-07 00:26 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2014-08-20 19:05 - 2014-09-07 00:26 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-20 19:02 - 2014-09-07 00:26 - 00567808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-08-20 19:02 - 2014-09-07 00:26 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-08-19 15:34 - 2014-08-19 15:26 - 00000000 ____D () C:\Users\Sacha\Desktop\Bildbearbeitung
2014-08-19 15:34 - 2014-06-14 07:56 - 00000000 ____D () C:\Users\Sacha\Documents\Appelmann
2014-08-19 15:30 - 2014-08-19 15:27 - 00000000 ____D () C:\Users\Sacha\Desktop\Spiele
2014-08-18 21:49 - 2013-06-03 23:47 - 01212928 ___SH () C:\Users\Sacha\Downloads\Thumbs.db
2014-08-14 17:27 - 2014-08-14 17:27 - 00000000 ____D () C:\Users\Sacha\.thumb
2014-08-13 09:07 - 2014-08-13 09:07 - 00585920 _____ (Firseria.-.Installer · sl) C:\Users\Sacha\Downloads\BPM Studio PRO.exe
2014-08-13 09:06 - 2014-08-13 09:05 - 11600939 _____ (AlcaTech ) C:\Users\Sacha\Downloads\bpmdemo.exe
2014-08-12 18:51 - 2014-08-12 18:46 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup.exe
2014-08-12 18:51 - 2014-08-12 18:46 - 234529496 _____ (LG Electronics) C:\Users\Sacha\Downloads\LGPCSuite_Setup (1).exe
2014-08-11 19:29 - 2014-08-11 19:29 - 00506140 _____ () C:\Users\Sacha\Downloads\Telcorion.htm
2014-08-11 19:22 - 2014-08-11 19:22 - 00312261 _____ () C:\Users\Sacha\Downloads\photo.htm
2014-08-11 19:03 - 2014-08-11 19:03 - 00294321 _____ () C:\Users\Sacha\Downloads\869314513098447.htm
2014-08-11 10:33 - 2014-08-11 10:33 - 00396756 _____ () C:\Users\Sacha\Downloads\733693106669417-0.htm

Some content of TEMP:
====================
C:\Users\Sacha\AppData\Local\Temp\BackupSetup.exe
C:\Users\Sacha\AppData\Local\Temp\COMAP.EXE
C:\Users\Sacha\AppData\Local\Temp\JIntellitype.dll
C:\Users\Sacha\AppData\Local\Temp\nsqF298.tmp.exe
C:\Users\Sacha\AppData\Local\Temp\nswBCBE.tmp.exe
C:\Users\Sacha\AppData\Local\Temp\ose00000.exe
C:\Users\Sacha\AppData\Local\Temp\PidGenX.dll
C:\Users\Sacha\AppData\Local\Temp\PodoWebSetup.exe
C:\Users\Sacha\AppData\Local\Temp\Quarantine.exe
C:\Users\Sacha\AppData\Local\Temp\setup.exe
C:\Users\Sacha\AppData\Local\Temp\utt9F76.tmp.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-04 11:09

==================== End Of Log ============================

cosinus · 07.09.2014, 11:52

Bitte auch ne neue Addition.txt erstellen, dazu FRST starten und einen Haken setzen bei Addition.txt, dann auf Scan klicken.

03.09.2014, 15:53	#4
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Hallo ihr lieben. Search Protect auf dem Rechner Windows 8 und bekomme es nicht mehr weg. Das erste Log (FRST.txt) ist leider unvollständig, bitte erneut und vollständig posten __________________ "Die Wahrheit ist normalerweise nur eine Entschuldigung für einen Mangel an Fantasie." (Elim Garak) Das Trojaner-Board unterstützen Warum Linux besser als Windows ist!

Hallo ihr lieben. Search Protect auf dem Rechner Windows 8 und bekomme es nicht mehr weg.

Plagegeister aller Art und deren Bekämpfung: Hallo ihr lieben. Search Protect auf dem Rechner Windows 8 und bekomme es nicht mehr weg.